docker-compose.yaml

networks:
  traefik_default:
    external: true

services:
  server:
    cap_add:
      - NET_BIND_SERVICE
    cap_drop:
      - ALL
    image: git.zarantonello.dev/university/notes:v2.18.3@sha256:4978bc2e2efa0c7b4a5dfa3a87a542498233330838648d740547101407c8f519
    labels:
      traefik.enable: true
      traefik.http.middlewares.university-notes-cors.headers.accesscontrolalloworiginlist: https://metrics.zarantonello.dev
      traefik.http.routers.university-notes.entrypoints: cloudflare
      traefik.http.routers.university-notes.middlewares: university-notes-cors
      traefik.http.routers.university-notes.rule: Host(`ice-notes.zarantonello.dev`)
      traefik.http.services.university-notes.loadbalancer.server.port: 80
    networks:
      - traefik_default
    read_only: true
    restart: always
    security_opt:
      - no-new-privileges:true
    user: 45383:45383