services:
  beszel:
    image: henrygd/beszel:latest
    container_name: beszel
    restart: unless-stopped

    environment:
      APP_URL: https://beszel.kaleschke.info

    volumes:
      - /mnt/user/appdata/beszel/data:/beszel_data
      - /mnt/user/appdata/beszel/socket:/beszel_socket

    ports:
      - "127.0.0.1:8090:8090"

    networks:
      - frontend_net

    security_opt:
      - no-new-privileges:true

    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.beszel.rule=Host(`beszel.kaleschke.info`)
      - traefik.http.routers.beszel.entrypoints=websecure
      - traefik.http.routers.beszel.tls=true
      - traefik.http.routers.beszel.tls.certresolver=le
      - traefik.http.services.beszel.loadbalancer.server.port=8090

  beszel-agent:
    image: henrygd/beszel-agent:latest
    container_name: beszel-agent
    restart: unless-stopped

    network_mode: host

    volumes:
      - /mnt/user/appdata/beszel/agent:/var/lib/beszel-agent
      - /mnt/user/appdata/beszel/socket:/beszel_socket
      - /var/run/docker.sock:/var/run/docker.sock:ro

    environment:
      LISTEN: /beszel_socket/beszel.sock
      HUB_URL: http://127.0.0.1:8090
      KEY: ""
      TOKEN: ""

    security_opt:
      - no-new-privileges:true

networks:
  frontend_net:
    external: true