services:
  rustfs_perms:
    image: alpine
    user: root
    volumes:
      - "{{ minio.data_path }}:/fix_path"
    command: chown -R 10001:10001 /fix_path

  rustfs:
    image: "rustfs/rustfs:{{ minio.version }}"
    networks:
      - proxy
    environment:
      RUSTFS_VOLUMES: /data
      RUSTFS_ADDRESS: 0.0.0.0:9000
      RUSTFS_CONSOLE_ENABLE: true
      RUSTFS_CONSOLE_ADDRESS: 0.0.0.0:9001
      RUSTFS_ACCESS_KEY: "{{ minio.user }}"
      RUSTFS_SECRET_KEY: "{{ minio.password }}"
    volumes:
      - "{{ minio.data_path }}:/data"

    depends_on:
        rustfs_perms:
          condition: service_completed_successfully

    healthcheck:
        test: ["CMD", "curl", "-f", "http://localhost:9000/health"]
        interval: 1m30s
        timeout: 10s
        retries: 3
        start_period: 20s

    labels:
      traefik.enable: true
      traefik.http.routers.rustfs.rule: "Host(`{{ minio.url }}`)"
      traefik.http.routers.rustfs.tls: true
      traefik.http.routers.rustfs.tls.certResolver: hetzner
      traefik.http.routers.rustfs.service: rustfs-https
      traefik.http.services.rustfs-https.loadbalancer.server.port: 9000

      traefik.http.routers.rustfs-admin.rule: "Host(`{{ minio.admin_url }}`)"
      traefik.http.routers.rustfs-admin.tls: true
      traefik.http.routers.rustfs-admin.tls.certResolver: hetzner
      traefik.http.routers.rustfs-admin.middlewares: secure-only@file
      traefik.http.routers.rustfs-admin.service: rustfs-admin-https
      traefik.http.services.rustfs-admin-https.loadbalancer.server.port: 9001

networks:
  proxy:
    name: traefik_exposed
    external: true