services:
  paperless-ngx:
    extends:
      file: ${TEMPLATES_PATH}
      service: default
    image: ghcr.io/paperless-ngx/paperless-ngx:latest
    container_name: paperless-ngx
    ports:
      - "4009:8000"
    volumes:
      - ${EXTERNAL_STORAGE}/paperless-ngx/data:/usr/src/paperless/data
      - ${EXTERNAL_STORAGE}/paperless-ngx/media:/usr/src/paperless/media
      - ${SERVICE_PATH}/paperless-ngx/data/export:/usr/src/paperless/export
      - ${SERVICE_PATH}/paperless-ngx/data/consume:/usr/src/paperless/consume
    environment:
      # REDIS
      PAPERLESS_REDIS: redis://redis:6379
      # DB
      PAPERLESS_DBHOST: postgres
      PAPERLESS_DBNAME: paperless
      PAPERLESS_DBUSER: paperless
      PAPERLESS_DBPASS: ${PAPERLESS_DB_PASSWORD}
      # Paperless var
      PAPERLESS_URL: https://paperless.${LOCAL_DOMAIN}
      PAPERLESS_ALLOWED_HOSTS: ${LOCAL_DOMAIN}
      PAPERLESS_OCR_LANGUAGE: fra+eng+deu
      # Admin user when not OIDC
      PAPERLESS_ADMIN_USER: chris
      PAPERLESS_ADMIN_PASSWORD: ${PAPERLESS_ADMIN_PASSWORD}
      # # OIDC
      # PAPERLESS_ENABLE_HTTP_REMOTE_USER: true
      # PAPERLESS_ACCOUNT_ALLOW_SIGNUPS: false
      # PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.${PUBLIC_DOMAIN}
    labels:
      # Watchtower
      - "com.centurylinklabs.watchtower.enable=true"
      # Traefik
      - "traefik.enable=true"
      - "traefik.http.routers.paperless.rule=Host(`paperless.${LOCAL_DOMAIN}`)"
      - "traefik.http.routers.paperless.entrypoints=https"
      - "traefik.http.routers.paperless.tls=true"
      # # Middlewares
      # - "traefik.http.routers.paperless.middlewares=authelia@file"