services:
  filebrowser:
    image: filebrowser/filebrowser:v2.63.5@sha256:aefb0c20de10ef8b617995ca5522479ad40d41e6386bd01946a345c6026ff31c
    container_name: filebrowser
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      - PUID=99
      - PGID=100
    volumes:
      - /mnt/user/documents:/srv/documents
      - /mnt/user/photos:/srv/photos
      - /mnt/user/projekte:/srv/projekte
      - /mnt/user/appdata/filebrowser/database:/database
      - /mnt/user/appdata/filebrowser/config:/config
    command: ["--database", "/database/filebrowser.db"]
    networks:
      - frontend_net
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.filebrowser.rule=Host(`files.kaleschke.info`)"
      - "traefik.http.routers.filebrowser.entrypoints=websecure"
      - "traefik.http.routers.filebrowser.tls=true"
      - "traefik.http.routers.filebrowser.tls.certresolver=le"
      - "traefik.http.routers.filebrowser.middlewares=authelia@file,secure-headers@file"
      - "traefik.http.services.filebrowser.loadbalancer.server.port=80"

networks:
  frontend_net:
    external: true