networks:
  traefik:
    external: true

services:
  rimgo:
    container_name: rimgo
    image: codeberg.org/video-prize-ranch/rimgo
    restart: unless-stopped
    networks:
      - traefik
    read_only: true
    cap_drop:
      - ALL
    labels:
      traefik.enable: true
      traefik.http.routers.rimgo.rule: "Host(`rimgo.local.{{ personal_domain }}`)"
      traefik.http.routers.rimgo.middlewares: lan-whitelist@file
      traefik.http.services.rimgo.loadbalancer.server.port: 3000