services:
  mail-archiver:
    image: s1t5/mailarchiver@sha256:ea7fd8c2e3e0ef0941e8dd9e726e35a8de33296f5c7b9ed811df5168ae6a9714
    container_name: mail-archiver
    restart: unless-stopped
    environment:
      TZ: Europe/Berlin
      ConnectionStrings__DefaultConnection: ${MAILARCHIVER_DB_CONNECTION}
      Authentication__Password: ${MAILARCHIVER_AUTH_PASSWORD}
    volumes:
      - /mnt/user/appdata/mailarchiver/data-protection-keys:/app/DataProtection-Keys
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - backend_net
      - frontend_net
    security_opt:
      - no-new-privileges:true
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.mail-archiver.rule=Host(`mail.kaleschke.info`)"
      - "traefik.http.routers.mail-archiver.entrypoints=websecure"
      - "traefik.http.routers.mail-archiver.tls=true"
      - "traefik.http.routers.mail-archiver.tls.certresolver=le"
      - "traefik.http.routers.mail-archiver.middlewares=authelia@file,secure-headers@file"
      - "traefik.http.services.mail-archiver.loadbalancer.server.port=5000"
networks:
  backend_net:
    external: true
  frontend_net:
    external: true