version: "3.9"
services:
  paperless:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.10
    container_name: paperless-ngx
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - PAPERLESS_TIKA_ENABLED=0
      - PAPERLESS_DBENGINE=postgresql
      - PAPERLESS_DBHOST=postgresql17
      - PAPERLESS_DBNAME=paperless
      - PAPERLESS_DBUSER=paperless
      - PAPERLESS_DBPASS=${PAPERLESS_DBPASS}
      - PAPERLESS_REDIS=${PAPERLESS_REDIS}
      - PAPERLESS_TIME_ZONE=Europe/Berlin
      - PAPERLESS_OCR_LANGUAGE=deu+eng
      - PAPERLESS_URL=https://paperless.kaleschke.info
    volumes:
      - /mnt/user/documents/scans_inbox:/usr/src/paperless/consume
      - /mnt/user/appdata/paperless-ngx/data:/usr/src/paperless/data
      - /mnt/user/documents/paperless/export:/usr/src/paperless/export
      - /mnt/user/documents/paperless:/usr/src/paperless/media
    networks:
      - frontend_net
      - backend_net
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.paperless.rule=Host(`paperless.kaleschke.info`)"
      - "traefik.http.routers.paperless.entrypoints=websecure"
      - "traefik.http.routers.paperless.tls=true"
      - "traefik.http.routers.paperless.tls.certresolver=le"
      - "traefik.http.services.paperless.loadbalancer.server.port=8000"
      - homepage.group=Apps
      - homepage.name=Paperless
      - homepage.icon=paperless-ngx.png
      - homepage.href=https://paperless.kaleschke.info
      - homepage.widget.type=paperlessngx
      - homepage.widget.url=http://paperless-web:8000

networks:
  frontend_net:
    external: true
  backend_net:
    external: true