deploy.yaml

version: 1
service: notes
username: notes

scripts:
  build_inside_vm: |
    apt-get update
    apt-get install openssl
    echo "MYSQL_USERNAME=root" > /home/notes/.env
    echo "MYSQL_DATABASE=notes" >> /home/notes/.env
    echo "MYSQL_HOST=mysql" >> /home/notes/.env
    docker compose -f /home/notes/docker-compose.yml build --pull
  start_once: |
    echo "MYSQL_ROOT_PASSWORD=$(openssl rand -hex 32)" >> /home/notes/.env
    echo "SECRET=$(openssl rand -hex 32)" >> /home/notes/.env
    docker compose -f /home/notes/docker-compose.yml up -d

files:
  - sources:
      - ./docker-compose.yml
      - ./www
      - ./docker
    destination: /home/notes

proxies:
  - name: main
    listener:
      protocol: http    
      certificate: wildcard.ctf.hitb.org
    upstream:
      host_index: 14
      port: 80    
    limits:
      - source: team
        location: /
        limit: 300r/m
        burst: 100
    dns_records:
      - notes