services:
  # Automatic Docker container updates
  watchtower:
    image: containrrr/watchtower
    restart: always
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    command: --interval 30

  # Ferron container
  ferron:
    image: ferronserver/ferron:2
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - "./ferron.kdl:/etc/ferron.kdl" # Ferron configuration file
      - "ferron-acme:/var/cache/ferron-acme" # This volume is needed for persistent automatic TLS cache, otherwise the web server will obtain a new certificate on each restart
    restart: always

  # TLS on demand check endpoint container
  ferron-tls-ask:
    build:
      context: ./tls-ask
    restart: always
    labels:
      # This can't be updated by Watchtower
      - "com.centurylinklabs.watchtower.enable=false"

volumes:
  ferron-acme: