services:
  jellyfin:
    image: jellyfin/jellyfin:10.11.8@sha256:1694ff069f0c9dafb283c36765175606866769f5d72f2ed56b6a0f1be922fc37
    container_name: jellyfin
    restart: unless-stopped
    environment:
      TZ: Europe/Berlin
      JELLYFIN_PublishedServerUrl: https://jellyfin.kaleschke.info
    volumes:
      - /mnt/user/appdata/jellyfin/config:/config
      - /mnt/user/appdata/jellyfin/cache:/cache
      - /mnt/user/media:/media:ro
      - /mnt/user/photos:/photos:ro
    networks:
      - frontend_net
    security_opt:
      - no-new-privileges:true
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.jellyfin.rule=Host(`jellyfin.kaleschke.info`)
      - traefik.http.routers.jellyfin.entrypoints=websecure
      - traefik.http.routers.jellyfin.tls=true
      - traefik.http.routers.jellyfin.tls.certresolver=le
      - traefik.http.routers.jellyfin.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.jellyfin.loadbalancer.server.port=8096

networks:
  frontend_net:
    external: true