services:
  wizarr:
    container_name: wizarr
    mem_limit: 2048m
    image: ghcr.io/wizarrrr/wizarr:v2026.7.1
    ports:
      - 5690:5690
    volumes:
      - /mnt/appdata/wizarr/data:/data/database
    restart: unless-stopped
    networks:
      - proxy-net
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.wizarr.entrypoints=websecure"
      - "traefik.http.routers.wizarr.rule=Host(`wizarr.castaldifamily.com`)"
      - "traefik.http.routers.wizarr.tls=true"
      - "traefik.http.routers.wizarr.tls.certresolver=cloudflare"
      - "traefik.http.routers.wizarr.service=wizarr"
      - "traefik.http.services.wizarr.loadbalancer.server.port=5690"

  wizarr-ldap:
      image: ghcr.io/goauthentik/ldap:2026.5.3
      networks:
        - proxy-net
      ports:
          - 389:389
          - 636:636
      environment:
          AUTHENTIK_HOST: https://sso.castaldifamily.com
          AUTHENTIK_INSECURE: "false"
          AUTHENTIK_TOKEN: ${AUTHENTIK_TOKEN}

networks:
  proxy-net:
    name: proxy-net
    external: true