version: "3.9"

services:
  paperless:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.10
    container_name: paperless
    restart: unless-stopped

    environment:
      - TZ=Europe/Berlin
      - PAPERLESS_URL=https://paperless.kaleschke.info

      # DB (Übergang erstmal klassisch – später Secret)
      - PAPERLESS_DBHOST=postgresql17
      - PAPERLESS_DBNAME=paperless
      - PAPERLESS_DBUSER=paperless
      - PAPERLESS_DBPASS=CHANGE_ME

      # Redis
      - PAPERLESS_REDIS=redis://redis:6379

    volumes:
      - /mnt/user/appdata/paperless/data:/usr/src/paperless/data
      - /mnt/user/appdata/paperless/media:/usr/src/paperless/media
      - /mnt/user/appdata/paperless/export:/usr/src/paperless/export
      - /mnt/user/appdata/paperless/consume:/usr/src/paperless/consume

    networks:
      - frontend_net
      - backend_net

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"

      - "traefik.http.routers.paperless.rule=Host(`paperless.kaleschke.info`)"
      - "traefik.http.routers.paperless.entrypoints=websecure"
      - "traefik.http.routers.paperless.tls.certresolver=le"

      - "traefik.http.services.paperless.loadbalancer.server.port=8000"

networks:
  frontend_net:
    external: true
  backend_net:
    external: true