services:
  web:
    image: ghcr.io/karakeep-app/karakeep:${KARAKEEP_VERSION:-release}
    restart: unless-stopped
    volumes:
      # By default, the data is stored in a docker volume called "data".
      # If you want to mount a custom directory, change the volume mapping to:
      # - /path/to/your/directory:/data
      - /var/data/karakeep/data:/data
#    ports:
#      - 3000:3000
    env_file:
      - .env
    environment:
      MEILI_ADDR: http://meilisearch:7700
      BROWSER_WEB_URL: http://chrome:9222
      OAUTH_WELLKNOWN_URL: 'https://pocketid.frodo.dfas4.de/.well-known/openid-configuration'
      OAUTH_CLIENT_ID: 'b924f978-a3e8-4842-95ef-f1e106258bb5'
      OAUTH_CLIENT_SECRET: 'iuNTyEZDCUhUDJC3Vi8jF2fQt2M2zkvO'
      OAUTH_PROVIDER_NAME: 'PocketID'
      # OPENAI_API_KEY: ...

      # You almost never want to change the value of the DATA_DIR variable.
      # If you want to mount a custom directory, change the volume mapping above instead.
      DATA_DIR: /data # DON'T CHANGE THIS
      labels:
    labels:  
      - "traefik.enable=true"
      - "traefik.http.routers.karakeep.rule=Host(`karakeep.gandalf.dfas4.de`)"
      - "traefik.http.routers.karakeep.entrypoints=websecure"
      - "traefik.http.routers.karakeep.tls=true"
      - "traefik.http.routers.karakeep.tls.certresolver=myresolver"
      - "traefik.http.services.karakeep.loadbalancer.server.port=3000"
      - "traefik.http.routers.karakeep.tls.domains[0].main=gandalf.dfas4.de"
      - "traefik.http.routers.karakeep.tls.domains[0].sans=*.gandalf.dfas4.de"
    networks:
      - proxy
      - default
  chrome:
    image: gcr.io/zenika-hub/alpine-chrome:124
    restart: unless-stopped
    command:
      - --no-sandbox
      - --disable-gpu
      - --disable-dev-shm-usage
      - --remote-debugging-address=0.0.0.0
      - --remote-debugging-port=9222
      - --hide-scrollbars
    networks:
      - default
  meilisearch:
    image: getmeili/meilisearch:v1.13.3
    restart: unless-stopped
    env_file:
      - .env
    environment:
      MEILI_NO_ANALYTICS: "true"
    volumes:
      - meilisearch:/meili_data
    networks:
      - default
volumes:
  meilisearch:
  data:
networks:
  proxy:
    name: proxy