services:
  grist:
    image: gristlabs/grist:1.7
    restart: unless-stopped
    volumes:
      - ${GRIST_DATA:-grist}:/persist
    environment:
      - GRIST_SESSION_SECRET=${GRIST_SESSION_SECRET}
      - GRIST_DEFAULT_EMAIL=${GRIST_DEFAULT_EMAIL:-admin@mail.com}
      - GRIST_SANDBOX_FLAVOR=gvisor
      - GRIST_SINGLE_ORG=camp
      - GRIST_PAGE_TITLE_SUFFIX= - Camp Interhack
      - APP_HOME_URL=https://${HOST}
    depends_on:
      - db
    labels:
      - traefik.enable=true
      - traefik.http.routers.grist.entryPoints=https
      - traefik.http.routers.grist.rule=Host(`${HOST}`)
      - traefik.http.routers.grist.tls.certresolver=le-ssl
      - traefik.http.services.grist.loadbalancer.server.port=8484
      - traefik.docker.network=front
    networks:
      - default
      - front

volumes:
  grist:

networks:
  front:
    external: true