Nathan
bcd5da7a59
All checks were successful
Auto-Deploy Changed Stacks / deploy (push) Successful in 13s
- Adds AUTHENTIK_HOST_BROWSER=https://sso.castaldifamily.com to all outposts - Required when internal AUTHENTIK_HOST differs from public SSO URL - Should resolve 404 errors in outpost configuration fetch
55 lines
2.0 KiB
YAML
55 lines
2.0 KiB
YAML
###############################################################
|
|
# Networks
|
|
###############################################################
|
|
networks:
|
|
proxy-net:
|
|
name: proxy-net
|
|
external: true
|
|
|
|
###############################################################
|
|
# Services
|
|
###############################################################
|
|
services:
|
|
sonarr:
|
|
image: lscr.io/linuxserver/sonarr:4.0.17.2952-ls307
|
|
container_name: sonarr
|
|
mem_limit: 5120m
|
|
ports:
|
|
- 8989:8989
|
|
environment:
|
|
- PUID=0
|
|
- PGID=0
|
|
- TZ=America/New_York
|
|
volumes:
|
|
- /mnt/appdata/sonarr/data:/config
|
|
- /mnt/media/tvshows:/tv
|
|
- /mnt/media/incoming/downloads-sab/complete/sonarr:/downloads
|
|
restart: unless-stopped
|
|
networks:
|
|
- proxy-net
|
|
# labels:
|
|
# - "traefik.enable=true"
|
|
# - "traefik.http.routers.sonarr.entrypoints=websecure"
|
|
# - "traefik.http.routers.sonarr.rule=Host(`sonarr.castaldifamily.com`)"
|
|
# - "traefik.http.routers.sonarr.tls=true"
|
|
# - "traefik.http.routers.sonarr.tls.certresolver=cloudflare"
|
|
# - "traefik.http.services.sonarr.loadbalancer.server.port=8989"
|
|
|
|
sonarr_outpost:
|
|
image: ghcr.io/goauthentik/proxy:2026.2.2
|
|
# Optionally specify the container's network, which must be able to reach the core authentik server.
|
|
networks:
|
|
- proxy-net
|
|
container_name: sonarr_outpost
|
|
environment:
|
|
AUTHENTIK_HOST: http://authentik_server:9000
|
|
AUTHENTIK_HOST_BROWSER: https://sso.castaldifamily.com
|
|
AUTHENTIK_INSECURE: "false"
|
|
AUTHENTIK_TOKEN: cJ4UWeFQ2DUTyvR22s588ciFuLSw698HTVxnEf7ecN3dq3nFOyVod6ngE66Z
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.sonarr.entrypoints=websecure"
|
|
- "traefik.http.routers.sonarr.rule=Host(`sonarr.castaldifamily.com`)"
|
|
- "traefik.http.routers.sonarr.tls=true"
|
|
- "traefik.http.routers.sonarr.tls.certresolver=cloudflare"
|
|
- "traefik.http.services.sonarr.loadbalancer.server.port=9000" |