services:
  stash:
    container_name: stash
    image: stashapp/stash:latest
    restart: "no"
    devices:
      - /dev/kfd
      - /dev/dri
    group_add:
      - 26 #video
      - 303 #render
    cap_add:
      - SYS_PTRACE
    security_opt:
      - seccomp:unconfined
    volumes:
      - $APPDATA/.stash:/root/.stash
      - $APPDATA/generated:/generated
      - $APPDATA/metadata:/metadata
      - $APPDATA/cache:/cache
      - $LIBRARY/Videos:/media/Videos
      - $LIBRARY/Galleries:/media/Galleries
      - /etc/localtime:/etc/localtime:ro
    environment:
      STASH_STASH: "/media/"
      STASH_GENERATED: "/generated/"
      STASH_METADATA: "/metadata/"
      STASH_CACHE: "/cache/"
    networks:
      - web
    labels:
      - traefik.http.routers.stash.rule=Host(`stash.jafner.net`)
      - traefik.http.routers.stash.tls.certresolver=lets-encrypt
      - traefik.http.routers.stash.middlewares=traefik-forward-auth-privileged@file

networks:
  web:
    external: true

# ffmpeg -hide_banner -vaapi_device /dev/dri/renderD128 -i "/media/Videos/test.mp4" -vf 'format=nv12,hwupload' -c:v hevc_vaapi -c:a copy "/media/Videos/test-hevc.mp4"