services:
  repodructor:
    image: gitea.nucleoriofrio.com/nucleo000/repodructor:latest
    container_name: repodructor
    restart: unless-stopped
    volumes:
      # Mount music directory from server
      - /srv/repodructor/musica:/app/public/music:ro
    environment:
      - NODE_ENV=production
      - NUXT_HOST=0.0.0.0
      - NUXT_PORT=3000
    networks:
      - principal
    labels:
      # Habilitar Traefik
      - "traefik.enable=true"

      # Router
      - "traefik.http.routers.musica-nucleoriofrio.rule=Host(`musica.nucleoriofrio.com`)"
      - "traefik.http.routers.musica-nucleoriofrio.entrypoints=websecure"
      - "traefik.http.routers.musica-nucleoriofrio.tls.certresolver=letsencrypt"

      # Middlewares: Authentik + headers + body-size
      - "traefik.http.routers.musica-nucleoriofrio.middlewares=authentik-forward-auth@file,musica-headers@file,musica-body-size@file"

      # Service
      - "traefik.http.services.musica-nucleoriofrio-service.loadbalancer.server.port=3000"

networks:
  principal:
    external: true