services:
  navidrome:
    extends:
      file: ${TEMPLATES_PATH}
      service: default
    image: deluan/navidrome 
    container_name: navidrome
    ports:
      - 2011:4533
    networks:
      - ip4net
    volumes:
      - ${MEDIA_PATH}/navidrome/data:/data
      - ${EXTERNAL_STORAGE}/media/music:/music:ro
    labels:
      # Watchtower
      - "com.centurylinklabs.watchtower.enable=true"
      # Traefik
      - "traefik.enable=true"
      - "traefik.http.routers.navidrome.rule=Host(`navidrome.${PUBLIC_DOMAIN}`)"
      - "traefik.http.routers.navidrome.entrypoints=https"
      - 'traefik.http.routers.navidrome.tls=true'
      # Middlewares
      - "traefik.http.routers.navidrome.middlewares=crowdsec-bouncer@file"