services:
  homepage:
    image: ghcr.io/gethomepage/homepage:latest
    container_name: homepage
    restart: unless-stopped
    dns:
      - 1.1.1.1
      - 192.168.178.1
    environment:
      HOMEPAGE_ALLOWED_HOSTS: home.kaleschke.info
      GITEA_TOKEN: ${GITEA_TOKEN}
      ADGUARD_USERNAME: ${ADGUARD_USERNAME}
      ADGUARD_PASSWORD: ${ADGUARD_PASSWORD}
      UPTIME_KUMA_STATUS_PAGE_SLUG: ${UPTIME_KUMA_STATUS_PAGE_SLUG}
      KOMODO_API_KEY: ${KOMODO_API_KEY}
      KOMODO_API_SECRET: ${KOMODO_API_SECRET}
      BACKREST_USERNAME: ${BACKREST_USERNAME}
      BACKREST_PASSWORD: ${BACKREST_PASSWORD}
      SPEEDTEST_TRACKER_API_KEY: ${SPEEDTEST_TRACKER_API_KEY}
      TAILSCALE_DEVICE_ID: ${TAILSCALE_DEVICE_ID}
      TAILSCALE_API_KEY: ${TAILSCALE_API_KEY}
      PAPERLESS_API_TOKEN: ${PAPERLESS_API_TOKEN}
      FILEBROWSER_USERNAME: ${FILEBROWSER_USERNAME}
      FILEBROWSER_PASSWORD: ${FILEBROWSER_PASSWORD}
      IMMICH_API_KEY: ${IMMICH_API_KEY}
      PLEX_TOKEN: ${PLEX_TOKEN}
      FIREFLY_III_ACCESS_TOKEN: ${FIREFLY_III_ACCESS_TOKEN}
      MEALIE_API_TOKEN: ${MEALIE_API_TOKEN}
    volumes:
      - /mnt/user/appdata/homepage:/app/config
      - /mnt/user/appdata/homepage/images:/app/public/images
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - frontend_net
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.homepage.rule=Host(`home.kaleschke.info`)
      - traefik.http.routers.homepage.entrypoints=websecure
      - traefik.http.routers.homepage.tls=true
      - traefik.http.routers.homepage.tls.certresolver=le
      - traefik.http.routers.homepage.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.homepage.loadbalancer.server.port=3000
    security_opt:
      - no-new-privileges:true

networks:
  frontend_net:
    external: true