services:
  openwebui:
    image: ghcr.io/open-webui/open-webui:main
    container_name: svc-webui-work
    restart: unless-stopped

    env_file:
      - .env

    volumes:
      - svc-webui-work_data:/app/backend/data

    networks:
      - infra-traefik_traefik-net

    labels:
      # --- Traefik ---
      - "traefik.enable=true"
      - "traefik.http.routers.webuiwork.rule=Host(`webui-work.ljh31.de`)"
      - "traefik.http.routers.webuiwork.entrypoints=websecure"
      - "traefik.http.routers.webuiwork.tls=true"
      - "traefik.http.routers.webuiwork.tls.certresolver=letsencrypt"
      - "traefik.http.routers.webuiwork.middlewares=lan-only@file"
      # --- Homepage ---
      - "homepage.group=AI"
      - "homepage.name=WebUI Work"
      - "homepage.icon=openwebui.svg"
      - "homepage.href=https://webui-work.ljh31.de"
      - "homepage.description=Open WebUI (Arbeit)"

volumes:
  svc-webui-work_data:
    driver: local

networks:
  infra-traefik_traefik-net:
    external: true