services:
  seerr:
    image: ghcr.io/seerr-team/seerr:latest
    init: true
    container_name: seerr
    networks:
      - traefik-public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.seerr.rule=Host(`overseerr.speerfam.net`)"
      - "traefik.http.routers.seerr.entrypoints=websecure"
      - "traefik.http.routers.seerr.tls.certresolver=myresolver"
      
      # Pulling the security rules dynamically from our file provider setup
      - "traefik.http.routers.seerr.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
      - "traefik.http.services.seerr.loadbalancer.server.port=5055"
    environment:
      - LOG_LEVEL=debug
      - TZ=America/Chicago
      - PORT=5055 #optional
    ports:
      - 5055:5055
    volumes:
      - /srv/docker/seerr/config:/app/config
    healthcheck:
      test: wget --no-verbose --tries=1 --spider http://localhost:5055/api/v1/status || exit 1
      start_period: 20s
      timeout: 3s
      interval: 15s
      retries: 3
    restart: unless-stopped
    
networks:
  traefik-public:
    external: true