version: "3.8"

services:
  dns-traefik-sync:
    image: git.ankh-morpork.discworld.network/laurence/dns-traefik-sync:latest
    environment:
      TRAEFIK_API: "http://192.168.88.2:8080"
      DNS_SERVER: "192.168.88.1"
      DNS_ZONE: "ankh-morpork.discworld.network"
      TARGET_IP: "192.168.88.2"
      TTL: "300"
      POLL_INTERVAL: "60"
      KEYTAB: "/run/secrets/dns-updater-keytab"
      KRB_PRINCIPAL: "dns-updater@DISCWORLD.NETWORK"
    secrets:
      - dns-updater-keytab
    restart: unless-stopped

secrets:
  dns-updater-keytab:
    external: true