add paperless

project/service/paperless-ngx/paperless-ngx.yml

@@ -0,0 +1,40 @@
+services:
+  paperless-ngx:
+    extends:
+      file: ${TEMPLATES_PATH}
+      service: default
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest
+    container_name: paperless-ngx
+    ports:
+      - "4009:8000"
+    volumes:
+      - ${EXTERNAL_STORAGE}/paperless-ngx/data:/usr/src/paperless/data
+      - ${EXTERNAL_STORAGE}/paperless-ngx/media:/usr/src/paperless/media
+      - ${SERVICE_PATH}/paperless-ngx/export:/usr/src/paperless/export
+      - ${SERVICE_PATH}/paperless-ngx/consume:/usr/src/paperless/consume
+    environment:
+      # REDIS
+      PAPERLESS_REDIS: redis://redis:6379
+      # DB
+      PAPERLESS_DBHOST: postgres
+      PAPERLESS_DBNAME: paperless
+      PAPERLESS_DBUSER: paperless
+      PAPERLESS_DBPASS: ${PAPERLESS_DB_PASSWORD}
+      # Paperless var
+      PAPERLESS_URL: https://paperless.${LOCAL_DOMAIN}
+      PAPERLESS_ALLOWED_HOSTS: ${LOCAL_DOMAIN}
+      PAPERLESS_OCR_LANGUAGE: fra+eng+deu
+      # OIDC
+      PAPERLESS_ENABLE_HTTP_REMOTE_USER: true
+      PAPERLESS_ACCOUNT_ALLOW_SIGNUPS: false
+      PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.${PUBLIC_DOMAIN}
+    labels:
+      # Watchtower
+      - "com.centurylinklabs.watchtower.enable=true"
+      # Traefik
+      - "traefik.enable=true"
+      - "traefik.http.routers.paperless.rule=Host(`paperless.${LOCAL_DOMAIN}`)"
+      - "traefik.http.routers.paperless.entrypoints=https"
+      - "traefik.http.routers.paperless.tls=true"
+      # Middlewares
+      - "traefik.http.routers.paperless.middlewares=authelia@file"