{
  "module": "route-proxy",
  "version": "1",
  "capabilities": [
    "container-runtime"
  ],
  "provides": [
    {
      "name": "route",
      "scope": "mesh"
    }
  ],
  "serves": {
    "route": {}
  },
  "receives": {
    "route": "/var/lib/route-proxy/routes/mesh.json"
  },
  "listens": [
    {
      "port": 80,
      "protocol": "tcp",
      "from": "anywhere",
      "why": "public HTTP, and the ACME HTTP-01 challenge answered at the name being certified"
    },
    {
      "port": 443,
      "protocol": "tcp",
      "from": "anywhere",
      "why": "public HTTPS for every name the mesh routes here"
    }
  ],
  "resources": [
    {
      "id": "state",
      "type": "directory",
      "path": "/var/lib/route-proxy",
      "mode": "0700"
    },
    {
      "id": "routes-dir",
      "type": "directory",
      "path": "/var/lib/route-proxy/routes",
      "mode": "0700"
    },
    {
      "id": "acme-cache",
      "type": "directory",
      "path": "/var/lib/route-proxy/acme",
      "mode": "0700"
    },
    {
      "id": "server",
      "type": "container",
      "name": "route-proxy",
      "image": "mesh-route-proxy@sha256:0000000000000000000000000000000000000000000000000000000000000000",
      "network": "host",
      "volumes": [
        "/var/lib/route-proxy/routes:/routes:ro",
        "/var/lib/route-proxy/acme:/acme"
      ],
      "env": {
        "ROUTES": "/routes/mesh.json",
        "LISTEN": ":80",
        "TLS_LISTEN": ":443",
        "ACME_CACHE": "/acme",
        "ACME_DIRECTORY": "https://acme-staging-v02.api.letsencrypt.org/directory"
      }
    }
  ]
}