version: '3'
services:
  gubernator-1:
    image: ghcr.io/mailgun/gubernator:latest
    entrypoint: "/gubernator"
    environment:
      # Basic member-list config
      - GUBER_GRPC_ADDRESS=0.0.0.0:81
      - GUBER_HTTP_ADDRESS=0.0.0.0:80
      - GUBER_ADVERTISE_ADDRESS=gubernator-1:81
      - GUBER_MEMBERLIST_KNOWN_NODES=gubernator-1
      # TLS config
      - GUBER_TLS_CA=/etc/tls/ca.pem
      - GUBER_TLS_KEY=/etc/tls/gubernator.key
      - GUBER_TLS_CERT=/etc/tls/gubernator.pem
      - GUBER_TLS_CLIENT_AUTH=require-and-verify
    ports:
      - "9081:81"
      - "9080:80"
    volumes:
      - ${PWD}/contrib/certs:/etc/tls

  gubernator-2:
    image: ghcr.io/mailgun/gubernator:latest
    entrypoint: "/gubernator"
    environment:
      # Basic member-list config
      - GUBER_GRPC_ADDRESS=0.0.0.0:81
      - GUBER_HTTP_ADDRESS=0.0.0.0:80
      - GUBER_ADVERTISE_ADDRESS=gubernator-2:81
      - GUBER_MEMBERLIST_KNOWN_NODES=gubernator-1
      # TLS config
      - GUBER_TLS_CA=/etc/tls/ca.pem
      - GUBER_TLS_KEY=/etc/tls/gubernator.key
      - GUBER_TLS_CERT=/etc/tls/gubernator.pem
      - GUBER_TLS_CLIENT_AUTH=require-and-verify
    ports:
      - "9181:81"
      - "9180:80"
    volumes:
      - ${PWD}/contrib/certs:/etc/tls

  gubernator-3:
    image: ghcr.io/mailgun/gubernator:latest
    entrypoint: "/gubernator"
    environment:
      # Basic member-list config
      - GUBER_GRPC_ADDRESS=0.0.0.0:81
      - GUBER_HTTP_ADDRESS=0.0.0.0:80
      - GUBER_ADVERTISE_ADDRESS=gubernator-3:81
      - GUBER_MEMBERLIST_KNOWN_NODES=gubernator-1
      # TLS config
      - GUBER_TLS_CA=/etc/tls/ca.pem
      - GUBER_TLS_KEY=/etc/tls/gubernator.key
      - GUBER_TLS_CERT=/etc/tls/gubernator.pem
      - GUBER_TLS_CLIENT_AUTH=require-and-verify
    ports:
      - "9281:81"
      - "9280:80"
    volumes:
      - ${PWD}/contrib/certs:/etc/tls

  gubernator-4:
    image: ghcr.io/mailgun/gubernator:latest
    entrypoint: "/gubernator"
    environment:
      # Basic member-list config
      - GUBER_DEBUG=true
      - GUBER_GRPC_ADDRESS=0.0.0.0:81
      - GUBER_HTTP_ADDRESS=0.0.0.0:80
      - GUBER_ADVERTISE_ADDRESS=gubernator-4:81
      - GUBER_MEMBERLIST_KNOWN_NODES=gubernator-1
      # TLS config
      - GUBER_TLS_CA=/etc/tls/ca.pem
      - GUBER_TLS_KEY=/etc/tls/gubernator.key
      - GUBER_TLS_CERT=/etc/tls/gubernator.pem
      - GUBER_TLS_CLIENT_AUTH=require-and-verify
    ports:
      - "9381:81"
      - "9380:80"
    volumes:
      - ${PWD}/contrib/certs:/etc/tls