services:
  plex:
    image: plexinc/pms-docker:1.43.1.10611-1e34174b1@sha256:8b5bcdf7b506fe051aa1a0a0d464efdb3ad8c0fb1f8a4dfb27a8c489b609920c
    container_name: plex
    restart: unless-stopped
    network_mode: host
    environment:
      TZ: Europe/Berlin
      PLEX_UID: "99"
      PLEX_GID: "100"
      CHANGE_CONFIG_DIR_OWNERSHIP: "true"
      PLEX_CLAIM: ${PLEX_CLAIM:-}
    labels:
      - traefik.enable=true
      - traefik.http.routers.plex.rule=Host(`plex.kaleschke.info`)
      - traefik.http.routers.plex.entrypoints=websecure
      - traefik.http.routers.plex.tls=true
      - traefik.http.routers.plex.tls.certresolver=le
      - traefik.http.routers.plex.middlewares=secure-headers@file
      - traefik.http.services.plex.loadbalancer.server.port=32400
    volumes:
      - /mnt/user/appdata/plex/config:/config
      - /mnt/user/appdata/plex/transcode:/transcode
      - /mnt/user/media:/data:ro
      - /mnt/user/photos:/photos:ro
    security_opt:
      - no-new-privileges:true