version: "3"
services:
  navidrome:
    image: deluan/navidrome:latest
    container_name: navidrome_navidrome
    user: 1000:1000
    networks:
      - web
    restart: unless-stopped
    environment:
      ND_BASEURL: ""
    volumes:
      - "$DOCKER_DATA:/data"
      - "$MUSIC_DIR:/music:ro"
    labels:
      - traefik.http.routers.navidrome.rule=Host(`navidrome.jafner.net`)
      - traefik.http.routers.navidrome.tls.certresolver=lets-encrypt
      - traefik.http.routers.navidrome.middlewares=authentik@file

networks:
  web:
    external: true