services:
  homepage:
    image: ghcr.io/gethomepage/homepage:v1.10.1@sha256:4815be05c8abf3503272b7ff1ac40c5f7364602a1ed807b0fc5a4cf69df0b15b
    container_name: homepage
    restart: unless-stopped
    environment:
     - HOMEPAGE_ALLOWED_HOSTS=${HOMEPAGE_DOMAIN}
    networks:
      - homelab_apps
    volumes:
      - ./config:/app/config
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=homelab_apps"
      - "traefik.http.routers.homepage.rule=Host(`${HOMEPAGE_DOMAIN}`)"
      - "traefik.http.routers.homepage.entrypoints=websecure"
      - "traefik.http.routers.homepage.tls=true"
      - "traefik.http.routers.homepage.tls.certresolver=le"
      - "traefik.http.services.homepage.loadbalancer.server.port=3000"

      - "traefik.http.middlewares.authentik.forwardauth.address=http://authentik-server-1:9000/outpost.goauthentik.io/auth/traefik"
      - "traefik.http.middlewares.authentik.forwardauth.trustForwardHeader=true"
      - "traefik.http.middlewares.authentik.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-groups,X-authentik-entitlements,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"
      - "traefik.http.routers.homepage.middlewares=authentik"

networks:
  homelab_apps:
    external: true