services:
  linkwarden:
    image: ghcr.io/linkwarden/linkwarden:latest
    container_name: linkwarden
    restart: unless-stopped

    env_file:
      - .env

    volumes:
      - /mnt/docker/linkwarden:/data/data

    environment:
      AUTH_OAUTH_KEYCLOAK_ID: ${KEYCLOAK_CLIENT_ID}
      AUTH_OAUTH_KEYCLOAK_SECRET: ${KEYCLOAK_CLIENT_SECRET}
      AUTH_OAUTH_KEYCLOAK_NAME: Keycloak
      AUTH_OAUTH_KEYCLOAK_ISSUER: ${KEYCLOAK_ISSUER}
      BASE_URL: https://linkwarden.ljh31.de

    networks:
      - infra-traefik_traefik-net

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.linkwarden.rule=Host(linkwarden.ljh31.de)"
      - "traefik.http.routers.linkwarden.entrypoints=websecure"
      - "traefik.http.routers.linkwarden.tls=true"
      - "traefik.http.routers.linkwarden.tls.certresolver=letsencrypt"
      - "traefik.http.services.linkwarden.loadbalancer.server.port=3000"

networks:
  infra-traefik_traefik-net:
    external: true