#---------------------------------------------------------------------#
#     Homarr — A simple, yet powerful dashboard for your server.      #
#---------------------------------------------------------------------#
services:
  {{ homarr_service_name }}:
    container_name: {{ homarr_service_name }}
    image: {{ homarr_image }}
    restart: unless-stopped
    volumes:
{% if homarr_use_docker %}
      - /var/run/docker.sock:/var/run/docker.sock
{% endif %}
      - {{ homarr_docker_volume_dir }}/homarr/appdata:/appdata
    environment:
      TZ: "Europe/Zurich"
      BASE_URL: "{{ homarr_base_url }}"
      NEXTAUTH_URL: "{{ homarr_base_url }}"
      SECRET_ENCRYPTION_KEY: "{{ homarr_secret_encryption_key }}"
      AUTH_PROVIDERS: "{{ homarr_auth_providers }}"
      AUTH_OIDC_ISSUER: "{{ homarr_oidc_issuer }}"
      AUTH_OIDC_CLIENT_ID: "{{ homarr_oidc_client_id }}"
      AUTH_OIDC_CLIENT_SECRET: "{{ homarr_oidc_client_secret }}"
      AUTH_OIDC_CLIENT_NAME: "{{ homarr_oidc_client_name | default('Keycloak') }}"
      AUTH_OIDC_SCOPE_OVERWRITE: "{{ homarr_oidc_scopes | default('openid email profile groups') }}"
      AUTH_OIDC_GROUPS_ATTRIBUTE: "{{ homarr_oidc_groups_attribute | default('groups') }}"
      AUTH_OIDC_AUTO_LOGIN: "{{ homarr_oidc_auto_login | default('false') }}"
    networks:
      - {{ homarr_traefik_network }}
    labels:
      - traefik.enable=true
      - traefik.docker.network={{ homarr_traefik_network }}
      - traefik.http.routers.{{ homarr_service_name }}.rule=Host(`{{ homarr_domain }}`)
{% if homarr_use_ssl %}
      - traefik.http.routers.{{ homarr_service_name }}.entrypoints=websecure
      - traefik.http.routers.{{ homarr_service_name }}.tls=true
{% else %}
      - traefik.http.routers.{{ homarr_service_name }}.entrypoints=web
{% endif %}
      - traefik.http.services.{{ homarr_service_name }}.loadbalancer.server.port={{ homarr_port }}
networks:
  {{ homarr_traefik_network }}:
    external: true