version: "3.8"

services:
  dns-traefik-sync:
    image: <REGISTRY>/laurence/dns-traefik-sync:latest
    environment:
      TRAEFIK_API: "http://<TARGET_IP>:8080"
      DNS_SERVER: "<DNS_SERVER_IP>"
      DNS_ZONE: "<DNS_ZONE>"
      TARGET_IP: "<TARGET_IP>"
      TTL: "300"
      POLL_INTERVAL: "60"
      KEYTAB: "/run/secrets/dns-updater-keytab"
      KRB_PRINCIPAL: "dns-updater@<REALM>"
    secrets:
      - dns-updater-keytab
    restart: unless-stopped

secrets:
  dns-updater-keytab:
    external: true