version: "2.1"
services:
  swag:
    image: ghcr.io/linuxserver/swag
    container_name: swag-proxy
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Jerusalem
      - URL=pukeko.xyz #optional
      - SUBDOMAINS=cloud,git,photos,stream,vault,wiki,grocy,torrent,ler,pod,sync,tasks,notes,news,secure,flight,monitor,tv,movies,subtitles,index,portain
      - VALIDATION=dns
      - DNSPLUGIN=cloudflare #optional
        #- PROPAGATION=100 #optional
        #- DUCKDNSTOKEN= #optional
      - EMAIL=matanhorovitz@protonmail.com #optional
      - ONLY_SUBDOMAINS=false #optional
        #- EXTRA_DOMAINS=
      - STAGING=false #optional
      - DOCKER_MODS=linuxserver/mods:swag-auto-reload
    volumes:
      - /Red-Vol/Media/Containers/swag/config:/config
    ports:
      - 443:443
      - 80:80 #optional
    restart: unless-stopped
  homer:
    image: b4bz/homer
    container_name: homer
    volumes:
      - /Red-Vol/Media/Containers/homer/assets/:/www/assets
    ports:
      - 4957:8080
    environment:
      - UID=1000
      - GID=1000
    restart: unless-stopped
  authelia:
    image: authelia/authelia:latest
    container_name: authelia
    environment:
      - TZ=Asia/Jerusalem
      - AUTHELIA_IDENTITY_PROVIDERS_OIDC_ISSUER_PRIVATE_KEY_FILE=/run/secrets/private_key
    volumes:
      - ./authelia:/config
    restart: unless-stopped
    secrets:
      - hmac
      - private_key
secrets:
  hmac:
    file: ./authelia/secrets/hmac
  private_key:
    file: ./authelia/secrets/issuer_private_key

networks:
  default:
    name: takahe_network