services:
  collabora:
    image: {{ collabora_image }}
    container_name: {{ collabora_service_name }}
    restart: unless-stopped
    environment:
      extra_params: "--o:ssl.enable=false --o:ssl.termination=true --o:ssl.ssl_verification={{ collabora_ssl_verification | string | lower }}"
    volumes:
      - {{ collabora_docker_volume_dir }}/coolwsd.xml:/etc/coolwsd/coolwsd.xml:ro
    cap_add:
      - MKNOD
    networks:
      - {{ collabora_traefik_network }}
{% if collabora_extra_hosts is defined and collabora_extra_hosts | length > 0 %}
    extra_hosts:
{% for host in collabora_extra_hosts %}
      - "{{ host }}"
{% endfor %}
{% endif %}
    labels:
      - traefik.enable=true
      - traefik.docker.network={{ collabora_traefik_network }}
      - traefik.http.routers.{{ collabora_service_name }}.rule=Host(`{{ collabora_domain }}`)
      - traefik.http.services.{{ collabora_service_name }}.loadbalancer.server.port={{ collabora_port }}
{% if collabora_use_ssl %}
      - traefik.http.routers.{{ collabora_service_name }}.entrypoints=websecure
      - traefik.http.routers.{{ collabora_service_name }}.tls=true
{% else %}
      - traefik.http.routers.{{ collabora_service_name }}.entrypoints=web
{% endif %}

networks:
  {{ collabora_traefik_network }}:
    external: true