services:
  audiobookshelf:
    image: ghcr.io/advplyr/audiobookshelf:latest
    container_name: audiobookshelf
    networks:
      - traefik-public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.audiobooks.rule=Host(`audiobooks.speerfam.net`)"
      - "traefik.http.routers.audiobooks.entrypoints=websecure"
      - "traefik.http.routers.audiobooks.tls.certresolver=myresolver"
      
      # Pulling the security rules dynamically from our file provider setup
      - "traefik.http.routers.audiobooks.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
      - "traefik.http.services.audiobooks.loadbalancer.server.port=8001"

    ports:
      - 13378:80
    volumes:
      - /srv/audiobooks:/audiobooks
      - /srv/podcasts:/podcasts
      - /srv/docker/audiobookshelf/config:/config
      - /srv/docker/audiobookshelf/metadata:/metadata
    environment:
      - TZ=America/Chicago

networks:
  traefik-public:
    external: true