services:
  sabnzbd:
    image: lscr.io/linuxserver/sabnzbd:latest
    networks:
      - traefik-public
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.sabnzb.rule=Host(`sab.speerfam.net`)"
      - "traefik.http.routers.sabnzb.entrypoints=websecure"
      - "traefik.http.routers.sabnzb.tls.certresolver=myresolver"
      # Pulling the security rules dynamically from our file provider setup
      - "traefik.http.routers.sabnzb.middlewares=geoblock-policy@file,crowdsec-policy@file,secure-headers@file"
      - "traefik.http.services.sabnzb.loadbalancer.server.port=8080"
    container_name: sabnzbd
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/Chicago
    volumes:
      - /srv/docker/sabnzb:/config
      - /downloads/complete:/complete #completed downloads
      - /downloads/incomplete:/incomplete-downloads #incomplete downloads
    ports:
      - 8080:8080
    restart: always