services:
  oauth2-proxy:
    image: quay.io/oauth2-proxy/oauth2-proxy:latest
    container_name: oauth2-proxy
    restart: unless-stopped
    env_file:
      - .env
    expose:
      - "4180"
    networks:
      - infra-traefik_traefik-net
    labels:
      - traefik.enable=true
      - "traefik.http.routers.oauth2-proxy.rule=Host(`auth-proxy.ljh31.de`)"
      - "traefik.http.routers.oauth2-proxy.entrypoints=websecure"
      - "traefik.http.routers.oauth2-proxy.tls=true"
      - "traefik.http.routers.oauth2-proxy.tls.certresolver=letsencrypt"
      - "traefik.http.services.oauth2-proxy.loadbalancer.server.port=4180"

networks:
  infra-traefik_traefik-net:
    external: true