services:
  filebrowser:
    image: filebrowser/filebrowser:latest
    container_name: filebrowser
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - PUID=99
      - PGID=100
    volumes:
      - /mnt/user:/srv
      - /mnt/user/appdata/filebrowser/database:/database
      - /mnt/user/appdata/filebrowser/config:/config
    command: ["--database", "/database/filebrowser.db"]
    networks:
      - frontend_net
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.filebrowser.rule=Host(`files.kaleschke.info`)"
      - "traefik.http.routers.filebrowser.entrypoints=websecure"
      - "traefik.http.routers.filebrowser.tls=true"
      - "traefik.http.routers.filebrowser.tls.certresolver=le"
      - "traefik.http.routers.filebrowser.middlewares=authelia@file,secure-headers@file"
      - "traefik.http.services.filebrowser.loadbalancer.server.port=80"

networks:
  frontend_net:
    external: true