version: '3'

services:

  master2:
    image: "rancher/k3s:${K3S_VERSION:-latest}"
    container_name: master2
    command: server --node-name=master2 --flannel-backend=wireguard-native --flannel-external-ip --disable-network-policy --disable traefik --disable local-storage --disable-helm-controller --disable metrics-server --disable coredns --node-external-ip="${K3S_MASTER2}" --advertise-address ${K3S_MASTER} --tls-san ${K3S_MASTER} --tls-san ${K3S_MASTER2} --node-label "node-type=master" --node-label "node-name=master2" --node-label "k8s=egate"
    tmpfs:
    - /run
    - /var/run
    ulimits:
      nproc: 65535
      nofile:
        soft: 65535
        hard: 65535
    privileged: true
    restart: always
    environment:
    - K3S_URL=https://${K3S_MASTER}:6443
    - K3S_TOKEN=${K3S_TOKEN:?err}
    - K3S_DATASTORE_ENDPOINT=http://${K3S_MASTER}:2379
    ports:
    - 6443:6443
    # volumes:
    # - ../registry/registries.yaml:/etc/rancher/k3s/registries.yaml
    networks:
      vv:
        ipv4_address: 172.25.0.36

  worker2:
    image: "rancher/k3s:${K3S_VERSION:-latest}"
    container_name: worker2
    command: agent --node-name=worker2 --node-external-ip="${K3S_MASTER2}" --node-label "node-type=worker" --node-label "node-name=worker2" --node-label "k8s=egate"
    tmpfs:
    - /run
    - /var/run
    ulimits:
      nproc: 65535
      nofile:
        soft: 65535
        hard: 65535
    privileged: true
    restart: always
    environment:
    - K3S_URL=https://${K3S_MASTER}:6443
    - K3S_TOKEN=${K3S_TOKEN:?err}
    # volumes:
    # - ../registry/registries.yaml:/etc/rancher/k3s/registries.yaml
    ports:
    - 8472:8472/udp
    - 51820:51820/udp
    - 51821:51821/udp
    networks:
      vv:
        ipv4_address: 172.25.0.37

  nginx:
    image: "nginx"
    container_name: nginx
    restart: always
    ports:
    - 3001:3001
    - 3002:3002
    - 3003:3003
    - 3004:3004
    - 3005:3005
    - 3006:3006
    - 3007:3007
    volumes:
      - ./nginx/default.conf:/etc/nginx/conf.d/default.conf
    networks:
      vv:
        ipv4_address: 172.25.0.20

networks:
  vv:
    driver: bridge
    ipam:
      driver: default
      config:
          - subnet: 172.25.0.0/24
            gateway: 172.25.0.1