services:
  linkwarden:
    image: ghcr.io/linkwarden/linkwarden:latest
    container_name: linkwarden
    restart: unless-stopped

    env_file:
      - .env

    volumes:
      - /mnt/docker/linkwarden:/data/data

    environment:
      BASE_URL: https://linkwarden.ljh31.de
      AUTH_OAUTH_KEYCLOAK_NAME: Keycloak

    networks:
      - infra-traefik_traefik-net

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.linkwarden.rule=Host(`linkwarden.ljh31.de`)"
      - "traefik.http.routers.linkwarden.entrypoints=websecure"
      - "traefik.http.routers.linkwarden.tls=true"
      - "traefik.http.routers.linkwarden.tls.certresolver=letsencrypt"
      - "traefik.http.services.linkwarden.loadbalancer.server.port=3000"

networks:
  infra-traefik_traefik-net:
    external: true