version: "3.9"

services:
  stash:
    image: stashapp/stash
    container_name: Stash
    restart: unless-stopped

    environment:
      - TZ=Europe/Berlin
      - HOST_OS=Unraid
      - HOST_HOSTNAME=Kallilabcore
      - HOST_CONTAINERNAME=Stash
      - STASH_CACHE=/cache/
      - STASH_METADATA=/metadata/
      - STASH_GENERATED=/generated/
      - STASH_STASH=/data/
      - STASH_CONFIG_FILE=/root/.stash/config.yml

    volumes:
      - /mnt/user/appdata/stash/config:/root/.stash
      - /mnt/user/appdata/stash/blobs:/blobs
      - /mnt/user/appdata/stash/cache:/cache
      - /mnt/user/media/Heimatfilme:/data
      - /mnt/user/appdata/stash/generated:/generated
      - /mnt/user/appdata/stash/metadata:/metadata

    networks:
      - frontend_net

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.stash.rule=Host(`stash.kaleschke.info`)"
      - "traefik.http.routers.stash.entrypoints=websecure"
      - "traefik.http.routers.stash.tls.certresolver=le"
      - "traefik.http.routers.stash.middlewares=secure-headers@file"
      - "traefik.http.services.stash.loadbalancer.server.port=9999"
      - "traefik.http.routers.stash.middlewares=dashboard-auth@file,secure-headers@file"

networks:
  frontend_net:
    external: true