networks:
  frontend:
    external: true

services:
  filebrowser:
    image: hurlenko/filebrowser
    container_name: filebrowser
    security_opt:
      - apparmor:unconfined
    labels:
      - traefik.enable=true
      - traefik.http.routers.file.entrypoints=websecure
      - traefik.http.routers.file.rule=Host(`example.domain.com`)
      - traefik.http.routers.file.tls=true
      - traefik.http.routers.file.tls.certresolver=production
      - traefik.http.routers.file.middlewares=authentik@file
      - traefik.http.routers.file.service=file
      - traefik.http.services.file.loadBalancer.server.port=8080
    volumes:
      - /docker/shared/nas/data/:/data
      - /docker/appdata/filebrowser/:/config
    networks:
      - frontend
    environment:
      - FB_BASEURL=/filebrowser
    restart: unless-stopped