version: "2.1"
services:
  swag:
    image: ghcr.io/linuxserver/swag
    container_name: swag-proxy
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Jerusalem
      - URL=pukeko.xyz #optional
      - SUBDOMAINS=cloud,git,photos,stream,vault,wiki,grocy,torrent,ler,pod,sync,tasks,notes,news,secure,flight,monitor,tv,movies,subtitles,index,portain
      - VALIDATION=dns
      - DNSPLUGIN=cloudflare #optional
        #- PROPAGATION=100 #optional
        #- DUCKDNSTOKEN= #optional
      - EMAIL=matanhorovitz@protonmail.com #optional
      - ONLY_SUBDOMAINS=false #optional
        #- EXTRA_DOMAINS=
      - STAGING=false #optional
      - DOCKER_MODS=linuxserver/mods:swag-auto-reload
    volumes:
      - /Red-Vol/Media/Containers/swag/config:/config
    ports:
      - 443:443
      - 80:80 #optional
    restart: unless-stopped
    networks:
      - swag_internal
      - swag_network
      - arr_network
      - filebrowser_network
      - gitea_network
      - grocy_network 
      - vaultwarden_network 
      - vikunja_network 
      - freshrss_network 
      - jekyll_network
      - jellyfin_network
      - joplin_network 
      - photoprism_network
      - podgrab_network 
      - portainer_network 
      - prometheus_network 
      - qbittorrent_network
      - syncthing_network 
      - takahe_network
      - wekan_network
      - wikijs_network
  homer:
    image: b4bz/homer
    container_name: homer
    volumes:
      - /Red-Vol/Media/Containers/homer/assets/:/www/assets
    ports:
      - 4957:8080
    environment:
      - UID=1000
      - GID=1000
    restart: unless-stopped
    networks:
      - swag_internal
  authelia:
    image: authelia/authelia:latest
    container_name: authelia
    environment:
      - TZ=Asia/Jerusalem
      - AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE=/run/secrets/private_key
    volumes:
      - ./authelia:/config
    restart: unless-stopped
    secrets:
      - hmac
      - private_key
    networks:
      - swag_internal
secrets:
  hmac:
    file: ./authelia/secrets/hmac
  private_key:
    file: ./authelia/secrets/issuer_private_key

networks:
  swag_network:
    driver: bridge
  swag_internal:
    driver: bridge
  arr_network:
    external: true
  filebrowser_network:
    external: true
  freshrss_network:
    external: true
  gitea_network:
    external: true
  grocy_network:
    external: true
  jekyll_network:
    external: true
  jellyfin_network:
    external: true
  joplin_network:
    external: true
  photoprism_network:
    external: true
  podgrab_network:
    external: true
  portainer_network:
    external: true
  prometheus_network:
    external: true
  vaultwarden_network:
    external: true
  vikunja_network:
    external: true
  wekan_network:
    external: true
  wikijs_network:
    external: true
  qbittorrent_network:
    external: true
  syncthing_network:
    external: true
  takahe_network:
    external: true