services:
  app:
    image: mattermost/mattermost-enterprise-edition:11.5.1@sha256:816d2fe91fd3e605fd8cc4d1756974da496acc8735528f81203554d7563e9f9e
    platform: linux/amd64
    container_name: mattermost
    restart: unless-stopped
    environment:
      MM_SQLSETTINGS_DRIVERNAME: postgres
      MM_SQLSETTINGS_DATASOURCE: postgres://mattermost:${MATTERMOST_POSTGRES_PASSWORD}@postgres:5432/mattermost?sslmode=disable
      MM_BLEVESETTINGS_INDEXDIR: /mattermost/bleve-indexes
      MM_OPENIDCONNECTSETTINGS_ENABLE: "true"
      MM_OPENIDCONNECTSETTINGS_ID: ${MATTERMOST_OIDC_CLIENT_ID}
      MM_OPENIDCONNECTSETTINGS_SECRET: ${MATTERMOST_OIDC_CLIENT_SECRET}
      MM_OPENIDCONNECTSETTINGS_DISCOVERYENDPOINT: ${MATTERMOST_OIDC_DISCOVERY_URL}
      MM_OPENIDCONNECTSETTINGS_BUTTONTEXT: Login with Authentik
      MM_EMAILSETTINGS_ENABLESIGNINWITHEMAIL: "true"
    volumes:
      - mattermost_data:/mattermost/data
      - mattermost_logs:/mattermost/logs
      - mattermost_config:/mattermost/config
      - mattermost_plugins:/mattermost/plugins
      - mattermost_client_plugins:/mattermost/client/plugins
      - mattermost_bleve:/mattermost/bleve-indexes
    networks:
      - homelab_apps
      - homelab_db
    labels:
      - traefik.enable=true
      - traefik.docker.network=homelab_apps
      - traefik.http.routers.mattermost.rule=Host(`${MATTERMOST_DOMAIN}`)
      - traefik.http.routers.mattermost.entrypoints=websecure
      - traefik.http.routers.mattermost.tls=true
      - traefik.http.routers.mattermost.tls.certresolver=le
      - traefik.http.services.mattermost.loadbalancer.server.port=8065

volumes:
  mattermost_data:
    driver: local
  mattermost_logs:
    driver: local
  mattermost_config:
    driver: local
  mattermost_plugins:
    driver: local
  mattermost_client_plugins:
    driver: local
  mattermost_bleve:
    driver: local

networks:
  homelab_apps:
    external: true
  homelab_db:
    external: true