services:
  recipe-mockup:
    build: .
    container_name: recipe-mockup
    restart: unless-stopped
    networks:
      - homelab_apps
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=homelab_apps"
      - "traefik.http.routers.recipe.rule=Host(`${RECIPE_DOMAIN}`)"
      - "traefik.http.routers.recipe.entrypoints=websecure"
      - "traefik.http.routers.recipe.tls=true"
      - "traefik.http.routers.recipe.tls.certresolver=le"
      - "traefik.http.services.recipe.loadbalancer.server.port=80" 
      
      # Authentik Protection
      - "traefik.http.middlewares.authentik.forwardauth.address=http://authentik-server:9000/outpost.goauthentik.io/auth/traefik"
      - "traefik.http.middlewares.authentik.forwardauth.trustForwardHeader=true"
      - "traefik.http.middlewares.authentik.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"
      - "traefik.http.routers.recipe.middlewares=authentik"

networks:
  homelab_apps:
    external: true