networks:
  traefik:
    external: true
    name: traefik_web


services:
  app:
    image:  git.xav.ovh/xav/whisperclient
    restart: 'unless-stopped'
    labels:
      traefik.enable: true
      traefik.docker.network: traefik_web
      traefik.http.routers.whisper-http.rule: Host(`${WHISPER_URL}`)
      traefik.http.routers.whisper-http.entrypoints: web
      traefik.http.routers.whisper-https.rule: Host(`${WHISPER_URL}`)
      traefik.http.routers.whisper-https.tls: true
      traefik.http.routers.whisper-https.entrypoints: websecure
      traefik.http.routers.whisper-https.tls.certresolver: letsencrypt
      traefik.http.services.whisper.loadbalancer.server.port: 5000
      traefik.http.routers.whisper-https.middlewares: whisper-auth
      traefik.http.middlewares.whisper-auth.basicauth.users: ${WHISPER_BASICAUTH}
    networks:
      - traefik
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 150M
    environment:
      FLASK_SECRET_KEY: ${FLASK_SECRET_KEY}
      OPENAI_API_KEY: ${OPENAI_API_KEY}