# 2023-09-26
# Stack: flame
---

flame:
  name: "flame"
  tasks:
    - flame.yml
  ipv6: true
  traefik: true
  secrets: true

  directories:
    - "{{ stack_folder_datas }}/flame/conf"
    - "{{ stack_folder_secrets }}/flame/secrets"

  services:

    - name: "flame"
      image: "pawelmalak/flame:latest"
      uid: "0"
      gid: "0"
      capabilities:
        - DAC_OVERRIDE
        - CHOWN
        - DAC_READ_SEARCH
      restart: "always"
      ports:
        - { exposed: "${VM_PORT_FLAME}",    container: "5005" }
      healthcheck: 'wget --no-verbose --tries=1 --spider http://0.0.0.0:5005/ || exit 1'
      environment:
        - { name: "PASSWORD_FILE",    value: "/run/secrets/password" }
      ressources:
        cpus: "{{ vm_os_cpu_max }}"
        memory: "{{ 0.5 if 0.5 <= vm_os_memory_max|float else vm_os_memory_max|float }}G"
      volumes:
        - { local: './{{ stack_folder_datas }}/flame/datas',   container: '/app/data',   mode: 'rw' }
      traefik:
        routers:
          - {
              name: "flame",
              rule: "Host(`{{ vm_subdomain_flame }}.{{ vm_internet_domain }}`)",
              middlewares: "default@file, errors@docker"
            }
          - {
              name: "flame-ws",
              rule: "Host(`{{ vm_subdomain_flame }}.{{ vm_internet_domain }}`) && Path(`/socket`)",
              middlewares: "default@file, wss@file"
            }
        services: []
      secrets:
        - { name: "password",   file: "./{{ stack_folder_secrets }}/flame/secrets/flame-password" }