networks:
  traefik:
    external: true

services:
  redlib:
    container_name: redlib
    image: quay.io/redlib/redlib:latest
    restart: unless-stopped
    user: nobody
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - traefik
    environment:
      REDLIB_DEFAULT_SHOW_NSFW: "on"
      REDLIB_DEFAULT_THEME: "system"
      REDLIB_DEFAULT_WIDE: "on"
      REDLIB_DEFAULT_LAYOUT: "card"
      REDLIB_DEFAULT_USE_HLS: "on"
      REDLIB_DEFAULT_SUBSCRIPTIONS: "hometheater+flashlight+navyblazer"
      REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION: "on"
    labels:
      traefik.enable: true
      traefik.http.routers.redlib.rule: "Host(`redlib.local.{{ personal_domain }}`)"
      traefik.http.routers.redlib.middlewares: lan-whitelist@file
      traefik.http.services.redlib.loadbalancer.server.port: 8080