services:
  code-server:
    image: lscr.io/linuxserver/code-server:4.116.0@sha256:4620adace18935dd6ca79d77e3bc1c379e21875392192f970cf5d6b0fb4aefcd
    container_name: code-server
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - FILE__PASSWORD=/run/secrets/password
      - DEFAULT_WORKSPACE=/workspace
      - PWA_APPNAME=KalliLab Code
      

    volumes:
      - /mnt/user/appdata/code-server:/config
      - /mnt/user/services/dev:/workspace
      - /mnt/user/appdata/code-server/secrets/password:/run/secrets/password:ro

    networks:
      - frontend_net

    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.code-server.rule=Host(`code.kaleschke.info`)
      - traefik.http.routers.code-server.entrypoints=websecure
      - traefik.http.routers.code-server.tls=true
      - traefik.http.routers.code-server.tls.certresolver=le
      - traefik.http.routers.code-server.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.code-server.loadbalancer.server.port=8443
   
networks:
  frontend_net:
    external: true