services:
  paperless-gpt:
    image: icereed/paperless-gpt:latest
    container_name: paperless-gpt
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

    environment:
      - TZ=Europe/Berlin
      - PAPERLESS_BASE_URL=http://paperless:8000
      - PAPERLESS_PUBLIC_URL=https://paperless.kaleschke.info
      - PAPERLESS_API_TOKEN=${PAPERLESS_API_TOKEN}
      - MANUAL_TAG=paperless-gpt
      - AUTO_TAG=paperless-gpt-auto
      - LLM_PROVIDER=openai
      - LLM_MODEL=gpt-4o-mini
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - LLM_LANGUAGE=German
      - OCR_PROVIDER=llm
      - VISION_LLM_PROVIDER=openai
      - VISION_LLM_MODEL=gpt-4o-mini
      - OCR_PROCESS_MODE=image

    volumes:
      - /mnt/user/appdata/paperless-gpt/data:/app/data
      - /mnt/user/appdata/paperless-gpt/prompts:/app/prompts

    dns:
      - 1.1.1.1
      - 8.8.8.8

    networks:
      - frontend_net

    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.paperless-gpt.rule=Host(`paperless-gpt.kaleschke.info`)
      - traefik.http.routers.paperless-gpt.entrypoints=websecure
      - traefik.http.routers.paperless-gpt.tls=true
      - traefik.http.routers.paperless-gpt.tls.certresolver=le
      - traefik.http.routers.paperless-gpt.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.paperless-gpt.loadbalancer.server.port=8080

networks:
  frontend_net:
    external: true