services:
  memos:
    image: neosmemo/memos:stable
    container_name: memos
    restart: unless-stopped
    volumes:
      - "./hdd0/memos:/var/opt/memos"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.memos.rule=Host(`notes.bouvais.lu`)"
      - "traefik.http.routers.memos.entrypoints=websecure"
      - "traefik.http.routers.memos.tls.certresolver=myresolver"
      - "traefik.http.services.memos.loadbalancer.server.port=5230"

  jellyfin:
    image: jellyfin/jellyfin
    container_name: jellyfin
    restart: unless-stopped
    group_add:
      - '107' #render
      - '44' #video
    volumes:
      - "./cache/jellyfin:/cache"
      - "./hdd0/jellyfin:/config"
      - "./hdd0/media:/media"
      - type: bind
        source: /data/media
        target: /media
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.jellyfin.rule=Host(`jellyfin.bouvais.lu`)"
      - "traefik.http.routers.jellyfin.entrypoints=websecure"
      - "traefik.http.routers.jellyfin.tls.certresolver=myresolver"
      - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"

  filebrowser:
    image: filebrowser/filebrowser:latest
    container_name: filebrowser
    restart: unless-stopped
    environment:
      TZ: Europe/Luxembourg
      FB_BASEURL: /
    volumes:
      - "./config/filebrowser/filebrowser.json:/.filebrowser.json"
      - "./hdd0/filebrowser/filebrowser.db:/database.db" 
      - "./hdd0/my_files:/srv"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.filebrowser.rule=Host(`files.bouvais.lu`)"
      - "traefik.http.routers.filebrowser.entrypoints=websecure"
      - "traefik.http.routers.filebrowser.tls.certresolver=myresolver"
      - "traefik.http.services.filebrowser.loadbalancer.server.port=80"

  actualbudget:
    image: actualbudget/actual-server:latest
    container_name: actualbudget
    restart: unless-stopped
    volumes:
      - "./hdd0/actualbudget:/data"
    environment:
      - TZ=Europe/Luxembourg
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.actualbudget.rule=Host(`budget.bouvais.lu`)"
      - "traefik.http.routers.actualbudget.entrypoints=websecure"
      - "traefik.http.routers.actualbudget.tls.certresolver=myresolver"
      - "traefik.http.services.actualbudget.loadbalancer.server.port=5006"

  vaultwarden:
    image: vaultwarden/server:1.33.2
    container_name: vaultwarden
    restart: unless-stopped
    environment:
      DOMAIN: "https://vault.bouvais.lu"
      SIGNUPS_ALLOWED: false
    volumes:
      - "./hdd0/vaultwarden:/data/"
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.my-vaultwarden-service.loadbalancer.server.port=80"
      - "traefik.http.routers.vaultwarden.rule=Host(`vault.bouvais.lu`)"
      - "traefik.http.routers.vaultwarden.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden.tls.certresolver=myresolver"
      - "traefik.http.routers.vaultwarden.service=my-vaultwarden-service@docker"
      - "traefik.http.routers.vaultwarden-admin.rule=Host(`vault.bouvais.lu`) && PathPrefix(`/admin`)"
      - "traefik.http.routers.vaultwarden-admin.entrypoints=websecure"
      - "traefik.http.routers.vaultwarden-admin.tls.certresolver=myresolver"
      - "traefik.http.routers.vaultwarden-admin.middlewares=auth@docker"
      - "traefik.http.routers.vaultwarden-admin.service=my-vaultwarden-service@docker"