services:
  gotify:
    image: gotify/server:2
    container_name: gotify
    restart: unless-stopped

    security_opt:
      - no-new-privileges:true

    volumes:
      - /mnt/user/appdata/gotify:/app/data
      - /mnt/user/appdata/gotify/secrets/defaultuser_pass:/run/secrets/defaultuser_pass:ro

    networks:
      - frontend_net

    ports:
      - "8088:80"

    environment:
      TZ: Europe/Berlin
      GOTIFY_DEFAULTUSER_PASS_FILE: /run/secrets/defaultuser_pass

networks:
  frontend_net:
    external: true