version: "3.8"

services:
  shepherd:
    image: containrrr/shepherd:latest
    environment:
      - SLEEP_TIME=24h
      - IGNORELIST_SERVICES=nginx-proxy-manager_app nginx-proxy-manager_backup
      - UPDATE_OPTIONS=--with-registry-auth
      - ROLLBACK_FAILURE=true
      - TZ=America/New_York
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager
      restart_policy:
        condition: on-failure