version: '3.3'

services:
  rabbitmq:
    image: rabbitmq:3.8.4-management-alpine
    volumes:
      - rabbitmq-data:/data
    networks:
      - traefik-public
    deploy:
      placement:
        constraints:
          - node.role == manager
          - node.labels.rabbitmq.rabbitmq-data == true
      labels:
        - traefik.enable=true
        - traefik.docker.network=traefik-public
        - traefik.constraint-label=traefik-public
        - traefik.http.routers.rabbitmq-http.rule=Host(`${DOMAIN?Variable not set}`)
        - traefik.http.routers.rabbitmq-http.entrypoints=http
        - traefik.http.routers.rabbitmq-http.middlewares=https-redirect
        - traefik.http.routers.rabbitmq-https.rule=Host(`${DOMAIN?Variable not set}`)
        - traefik.http.routers.rabbitmq-https.entrypoints=https
        - traefik.http.routers.rabbitmq-https.tls=true
        - traefik.http.routers.rabbitmq-https.tls.certresolver=le
        - traefik.http.services.rabbitmq.loadbalancer.server.port=15672

        - traefik.tcp.routers.ingress.rule=HostSNI(`*`)
        - traefik.tcp.routers.ingress.entrypoints=rabbitmq
        - traefik.tcp.services.ingress.loadbalancer.server.port=5672

networks:
  traefik-public:
    external: true

volumes:
  rabbitmq-data: