services:
  linkstack:
    # The version tags are not really friendly, unfortunately... so might as well follow latest
    image: 'linkstackorg/linkstack:latest@sha256:abd691b4293b020a317de8794737671e0315159efcb868e8a4124d6f0611f7ae'
    environment:
      TZ: 'Europe/Zurich'
      SERVER_ADMIN: '${DC_LINKSTACK_ADMIN_EMAIL:?}'
      HTTP_SERVER_NAME: '${DC_LINKSTACK_HOSTNAME:?}'
      LOG_LEVEL: 'info'
      PHP_MEMORY_LIMIT: '256M'
      UPLOAD_MAX_FILESIZE: '8M'
    volumes:
      - data:/htdocs
    restart: unless-stopped

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.linkstack-ui.rule=Host(`${DC_LINKSTACK_HOSTNAME:?}`) || Host(`www.${DC_LINKSTACK_HOSTNAME:?}`)"
      - "traefik.http.routers.linkstack-ui.entrypoints=websecure"
      - "traefik.http.routers.linkstack-ui.tls=true"
      - "traefik.http.routers.linkstack-ui.tls.certresolver=le"
      - "traefik.http.routers.linkstack-ui.service=linkstack-ui"
      - "traefik.http.services.linkstack-ui.loadBalancer.server.port=443"
      - "traefik.http.services.linkstack-ui.loadbalancer.server.scheme=https"
      - "traefik.http.routers.linkstack-ui.middlewares=linkstack-head"
      - "traefik.http.middlewares.linkstack-head.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.X-Robots-Tag=none"
      - "traefik.http.middlewares.linkstack-head.headers.customResponseHeaders.Strict-Transport-Security=max-age=63072000"
      - "traefik.http.middlewares.linkstack-head.headers.stsSeconds=31536000"
      - "traefik.http.middlewares.linkstack-head.headers.accesscontrolalloworiginlist=*"
    networks:
      - traefik

volumes:
  data:

networks:
  traefik:
    external: true