services:
  nessus-essentials:
    image: tenable/nessus:latest-ubuntu
    container_name: nessus-essentials
    ports:
      - "8834:8834"
    networks:
      - netgrimoire
    environment:
      - USERNAME=admin 
      - PASSWORD=admin
      - ACTIVATION_CODE=3RH7-HX4R-DKS6-EJFK-GNWG
    restart: unless-stopped
    volumes:
      - /DockerVol/nessus:/opt/nessus/var/nessus

    deploy:
      labels:
        - homepage.group=Monitoring
        - homepage.name=Nessus
        - homepage.icon=phoneinfoga.png
        - homepage.href=http://nessus.netgrimoire.com
        - homepage.description=Vulnerability Scanner
        - caddy=nessus.netgrimoire.com
        - caddy.import=authentik
 #       - caddy.reverse_proxy="{{upstreams 8834}}"
        - caddy.reverse_proxy=https://nessus-essentials:8834
        - caddy.tls_insecure_skip_verify=true  # Allow self-signed certs
      placement:
        constraints:
        - node.hostname == docker2

networks:
  netgrimoire:
    external: true