version: '3'

services:
  linkwarden:
    image: ghcr.io/linkwarden/linkwarden:latest
    container_name: linkwarden
    restart: unless-stopped
    
    volumes:
      - /mnt/docker/linkwarden:/data/data

    environment:
      DATABASE_URL: ${DATABASE_URL}
      NEXTAUTH_SECRET: ${NEXTAUTH_SECRET}
      NEXTAUTH_URL: ${NEXTAUTH_URL}
      BASE_URL: https://linkwarden.ljh31.de
      NEXT_PUBLIC_KEYCLOAK_ENABLED: ${NEXT_PUBLIC_KEYCLOAK_ENABLED}
      AUTH_OAUTH_KEYCLOAK_ID: ${KEYCLOAK_ID}
      AUTH_OAUTH_KEYCLOAK_SECRET: ${KEYCLOAK_SECRET}
      AUTH_OAUTH_KEYCLOAK_NAME: Keycloak
      AUTH_OAUTH_KEYCLOAK_ISSUER: ${KEYCLOAK_ISSUER}
      
    networks:
      - infra-traefik_traefik-net

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.linkwarden.rule=Host(`linkwarden.ljh31.de`)"
      - "traefik.http.routers.linkwarden.entrypoints=websecure"
      - "traefik.http.routers.linkwarden.tls=true"
      - "traefik.http.routers.linkwarden.tls.certresolver=letsencrypt"
      - "traefik.http.services.linkwarden.loadbalancer.server.port=3000"

networks:
  infra-traefik_traefik-net:
    external: true