From 59bfa5c129e9019add95ff2e1b54155af145a58b Mon Sep 17 00:00:00 2001
From: mattspeer <mwspeer@gmail.com>
Date: Sun, 31 May 2026 21:04:19 -0500
Subject: [PATCH] Add docker-compose.yml

initial commit
---
 docker-compose.yml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 docker-compose.yml

diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..ea39ee0
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,28 @@
+services:
+  navidrome:
+    image: deluan/navidrome:latest
+    contaienr_name: navidrome
+    networks:
+      - traefik-public
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.nd.rule=Host(`music.speerfam.net`)"
+      - "traefik.http.routers.nd.entrypoints=websecure"
+      - "traefik.http.routers.nd.tls.certresolver=myresolver"
+      # Pulling the security rules dynamically from our file provider setup
+      - "traefik.http.routers.nd.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
+      - "traefik.http.services.nd.loadbalancer.server.port=4533"
+    user: 1000:1000 # should be owner of volumes
+    ports:
+      - "4533:4533"
+    restart: unless-stopped
+    environment:
+      # Optional: put your config options customization here. Examples:
+      # ND_LOGLEVEL: debug
+    volumes:
+      - "/srv/docker/nd/data:/data"
+      - "/srv/music:/music:ro"
+
+networks:
+  traefik-public:
+    external: true
\ No newline at end of file