services:
  nessus-essentials:
    image: tenable/nessus:latest-ubuntu
    container_name: nessus-essentials
    ports:
      - "8834:8834"
    networks:
      - netgrimoire
    environment:
      - USERNAME=admin 
      - PASSWORD=admin
    #  - ACTIVATION_CODE=3RH7-HX4R-DKS6-EJFK-GNWG
    # restart: unless-stopped
    volumes:
      - data:/opt/nessus/var/nessus

    deploy:
      labels:
        - homepage.group=Monitoring
        - homepage.name=Nessus
        - homepage.icon=phoneinfoga.png
        - homepage.href=http://nessus.netgrimoire.com
        - homepage.description=Vulnerability Scanner
        - caddy=nessus.netgrimoire.com
        - caddy.import=authentik
 #       - caddy.reverse_proxy="{{upstreams 8834}}"
        # - caddy.reverse_proxy=https://nessus-essentials:8834
        # - caddy.tls_insecure_skip_verify=true  # Allow self-signed certs
        - caddy.reverse_proxy=https://nessus-essentials:8834
        - caddy.reverse_proxy.transport=http
        - caddy.reverse_proxy.transport.tls
        - caddy.reverse_proxy.transport.tls_insecure_skip_verify
      placement:
        constraints:
        - node.hostname == docker2

networks:
  netgrimoire:
    external: true   


volumes:
  data:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /DockerVol/nessus