From 238cd20f9fa417a935164d5122c0c333f7541799 Mon Sep 17 00:00:00 2001
From: mattspeer <mwspeer@gmail.com>
Date: Sat, 30 May 2026 22:26:14 -0500
Subject: [PATCH] Update docker-compose.yaml

added labels and network for traefik.  Added internal network for paperless containers
---
 docker-compose.yaml | 31 ++++++++++++++++++++++++-------
 1 file changed, 24 insertions(+), 7 deletions(-)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index a3e8ac0..1f7d4a6 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -31,15 +31,18 @@
 services:
   broker:
     image: docker.io/library/redis:7
+    networks:
+      - paperless
     restart: unless-stopped
     volumes:
-#      - /home/mattspeer/paperless-ngx/redis/redisdata:/data
       - /srv/docker/paperless-ngx/redis/redisdata:/data
+      
   db:
     image: docker.io/library/postgres:15
+    networks:
+      - paperless
     restart: unless-stopped
     volumes:
-#      - /home/mattspeer/paperless-ngx/postgress/pgdata:/var/lib/postgresql/data
       - /srv/docker/paperless-ngx/postgress/pgdata:/var/lib/postgresql/data
     environment:
       POSTGRES_DB: paperless
@@ -48,6 +51,18 @@ services:
 
   webserver:
     image: ghcr.io/paperless-ngx/paperless-ngx:latest
+    networks:
+      - traefik-public
+      - paperless
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.paperless.rule=Host(`photos.speerfam.net`)"
+      - "traefik.http.routers.paperless.entrypoints=websecure"
+      - "traefik.http.routers.paperless.tls.certresolver=myresolver"
+      
+      # Pulling the security rules dynamically from our file provider setup
+      - "traefik.http.routers.paperless.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
+      - "traefik.http.services.paperless.loadbalancer.server.port=2283"
     restart: unless-stopped
     depends_on:
       - db
@@ -55,10 +70,6 @@ services:
     ports:
       - "8010:8000"
     volumes:
-#      - /home/mattspeer/paperless-ngx/web/data:/usr/src/paperless/data
-#      - /doc-archive/artifacts:/usr/src/paperless/media
-#      - /doc-archive/export:/usr/src/paperless/export
-#      - /doc-archive/consume:/usr/src/paperless/consume
       - /srv/docker/paperless-ngx/web/data:/usr/src/paperless/data
       - /srv/doc-archive/artifacts:/usr/src/paperless/media
       - /srv/doc-archive/export:/usr/src/paperless/export
@@ -95,4 +106,10 @@ volumes:
   data:
   media:
   pgdata:
-  redisdata:
\ No newline at end of file
+  redisdata:
+
+networks:
+  traefik-public:
+    external: true
+  paperless:
+    external: false
\ No newline at end of file