docker-compose.yml

version: '3.7'

volumes:
  wekan:

networks:
  proxy:
    external: true
  wekan:
    name: wekan

services:
  wekan-db:
    image: mongo:4.4
    container_name: wekan-db
    command: mongod --oplogSize 128
    expose:
      - 27017
    volumes:
      - wekan:/data/db
    networks:
      - wekan
    restart: unless-stopped

  wekan-app:
    image: quay.io/wekan/wekan-gantt-gpl:v5.35
    build:
      context: http://github.com/wekan/wekan-gantt-gpl.git#v5.35
    container_name: wekan-app
    environment:
      - MONGO_URL=mongodb://wekan-db:27017/wekan
      - ROOT_URL=https://kanban.picasoft.net
      # ==== WEKAN API AND EXPORT BOARD ====
      # Wekan Export Board works when WITH_API=true.
      # https://github.com/wekan/wekan/wiki/REST-API
      - WITH_API=true
      # ==== PASSWORD BRUTE FORCE PROTECTION ====
      - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURES_BEFORE=10
      - ACCOUNTS_LOCKOUT_KNOWN_USERS_PERIOD=60
      - ACCOUNTS_LOCKOUT_KNOWN_USERS_FAILURE_WINDOW=15
    env_file: ./secrets/mail.secrets
    depends_on:
      - wekan-db
    labels:
      traefik.http.routers.wekan-app.entrypoints: websecure
      traefik.http.routers.wekan-app.rule: Host(`kanban.picasoft.net`)
      traefik.http.services.wekan-app.loadbalancer.server.port: 8080
      traefik.enable: true
    networks:
      - proxy
      - wekan
    restart: unless-stopped

  wekan-filter-hooks:
    image: registry.picasoft.net/wekan-filter-hooks:v0.2
    build: ./filter-hooks
    container_name: wekan-filter-hooks
    networks:
      - wekan
    restart: unless-stopped

  wekan-exporter:
    image: registry.picasoft.net/pica-wekan-exporter:0.1.0
    build: ./prometheus-exporter
    container_name: wekan-exporter
    env_file: ./secrets/wekan-exporter.secrets
    networks:
      - proxy
    labels:
      traefik.http.routers.wekan-metrics.entrypoints: websecure
      traefik.http.routers.wekan-metrics.rule: "Host(`kanban.picasoft.net`) && PathPrefix(`/metrics`)"
      traefik.http.routers.wekan-metrics.service: wekan-metrics
      traefik.http.routers.wekan-metrics.middlewares: "wekan-metrics-auth@docker"
      traefik.http.middlewares.wekan-metrics-auth.basicauth.users: "${METRICS_AUTH}"
      traefik.http.services.wekan-metrics.loadbalancer.server.port: 8000
      traefik.enable: true
    restart: unless-stopped