services:
  gotify:
    image: gotify/server:2
    container_name: gotify
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    volumes:
      - /mnt/user/appdata/gotify:/app/data
      - /mnt/user/appdata/gotify/secrets/defaultuser_pass:/run/secrets/defaultuser_pass:ro
    networks:
      - frontend_net
    environment:
      TZ: Europe/Berlin
      GOTIFY_DEFAULTUSER_PASS_FILE: /run/secrets/defaultuser_pass
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.gotify.rule=Host(`gotify.kaleschke.info`)"
      - "traefik.http.routers.gotify.entrypoints=websecure"
      - "traefik.http.routers.gotify.tls=true"
      - "traefik.http.routers.gotify.tls.certresolver=le"
      - "traefik.http.services.gotify.loadbalancer.server.port=80"

networks:
  frontend_net:
    external: true