###############################################################
# Networks
###############################################################
networks:
  proxy-net:
    name: proxy-net
    external: true

###############################################################
# Services
###############################################################
services:
  radarr:
    image: lscr.io/linuxserver/radarr:6.1.1.10360-ls299
    container_name: radarr
    mem_limit: 2048m
    ports:
      - 7878:7878
    environment:
      - PUID=0
      - PGID=0
      - TZ=America/New_York
    volumes:
      - /mnt/appdata/radarr/data:/config
      - /mnt/media/movies:/movies
      - /mnt/media/incoming/downloads-sab/complete:/downloads
    restart: unless-stopped
    networks:
      - proxy-net
    # labels:
    #   - "traefik.enable=true"
    #   - "traefik.http.routers.radarr.entrypoints=websecure"
    #   - "traefik.http.routers.radarr.rule=Host(`radarr.castaldifamily.com`)"
    #   - "traefik.http.routers.radarr.tls=true"
    #   - "traefik.http.routers.radarr.tls.certresolver=cloudflare"
    #   - "traefik.http.services.radarr.loadbalancer.server.port=7878"
  radarr_outpost:
    image: ghcr.io/goauthentik/proxy:2026.2.2
    container_name: radarr_outpost
    networks:
      - proxy-net
    environment:
      AUTHENTIK_HOST: https://sso.castaldifamily.com
      AUTHENTIK_TOKEN: mEK1nIhle1dorsb2x7EJlDfwqdQ2GZLlDdzZhTeP9RMvrWtrlM0ZW89SiBWB
      AUTHENTIK_INSECURE: "false"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.radarr-proxy.entrypoints=websecure"
      - "traefik.http.routers.radarr-proxy.rule=Host(`radarr.castaldifamily.com`)"
      - "traefik.http.routers.radarr-proxy.tls=true"
      - "traefik.http.routers.radarr-proxy.tls.certresolver=cloudflare"
      - "traefik.http.services.radarr-proxy.loadbalancer.server.port=9000"