services:
  plex:
    image: lscr.io/linuxserver/plex:latest
    container_name: plex
    networks:
      - traefik-public
      - immich
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.plex.rule=Host(`plex.speerfam.net`)"
      - "traefik.http.routers.plex.entrypoints=websecure"
      - "traefik.http.routers.plex.tls.certresolver=myresolver"
      
      # Pulling the security rules dynamically from our file provider setup
      - "traefik.http.routers.plex.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
      - "traefik.http.services.plex.loadbalancer.server.port=32400"

    network_mode: host
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
      - VERSION=docker
      - PLEX_CLAIM= #optional
    volumes:
      - /home/mattspeer/docker/plex:/config
      - /srv/tv:/tv
      - /srv/movies:/movies
      - /srv/music:/music
      - /srv/audiobooks:/audiobooks
    ports:
      - 32400:32400
    restart: always

networks:
  traefik-public:
    external: true