# docker-compose.yml
services:
  convertx:
    image: ghcr.io/c4illin/convertx
    container_name: convertx
    networks:
      - proxy-net
    restart: unless-stopped
    environment:
      - JWT_SECRET=${JWT_SECRET}
      - ACCOUNT_REGISTRATION=${ACCOUNT_REGISTRATION}
      - HTTP_ALLOWED=${HTTP_ALLOWED}
      - ALLOW_UNAUTHENTICATED=${ALLOW_UNAUTHENTICATED}
      - AUTO_DELETE_EVERY_N_HOURS=${AUTO_DELETE_EVERY_N_HOURS}
      - HIDE_HISTORY=${HIDE_HISTORY}
      - LANGUAGE=${LANGUAGE}
      - UNAUTHENTICATED_USER_SHARING=${UNAUTHENTICATED_USER_SHARING}
      - MAX_CONVERT_PROCESS=${MAX_CONVERT_PROCESS}
    volumes:
      - /mnt/appdata/convertx/data:/app/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.convertx.entrypoints=websecure"
      - "traefik.http.routers.convertx.rule=Host(`convertx.castaldifamily.com`)"
      - "traefik.http.routers.convertx.tls=true"
      - "traefik.http.routers.convertx.tls.certresolver=cloudflare"
      - "traefik.http.services.convertx.loadbalancer.server.port=3000"
      - "traefik.http.routers.convertx.middlewares=authentik-auth@file"

networks:
  proxy-net:
    external: true