services:
  nginx:
    ports:
      - "${HTTPS_PORT:-8643}:443"
    volumes:
      - ./deploy/nginx/templates/tls.conf.template:/etc/nginx/templates/default.conf.template:ro
      - ${SSL_CERTIFICATE_DIR:-./config/ssl}:/etc/nginx/ssl:ro
      # Certbot's live certificates are symlinks into ../../archive.
      - ./config/letsencrypt/archive:/etc/archive:ro