services:
  SnapOtter:
    image: snapotter/snapotter:latest  # or ghcr.io/snapotter-hq/snapotter:latest
    # ports:
    #   - "1349:1349"
    volumes:
      - /mnt/appdata/snapotter/data:/data
    networks:
      - proxy-net
    environment:
      - AUTH_ENABLED=${AUTH_ENABLED}
      # - DEFAULT_USERNAME=${DEFAULT_USERNAME}
      # - DEFAULT_PASSWORD=${DEFAULT_PASSWORD}
      - MAX_USERS=${MAX_USERS}
      - SESSION_DURATION_HOURS=${SESSION_DURATION_HOURS}
      - TRUST_PROXY=${TRUST_PROXY}
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.snapotter.entrypoints=websecure"
      - "traefik.http.routers.snapotter.rule=Host(`snapotter.castaldifamily.com`)"
      - "traefik.http.routers.snapotter.tls=true"
      - "traefik.http.routers.snapotter.tls.certresolver=cloudflare"
      - "traefik.http.routers.snapotter.service=snapotter"
      - "traefik.http.services.snapotter.loadbalancer.server.port=1349"

networks:
  proxy-net:
    external: true