services:
  excalidraw:
    container_name: excalidraw
    image: excalidraw/excalidraw:latest
    environment:
      - PUID=1029
      - PGID=1000
    restart: unless-stopped
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.ex.rule=Host(`excalidraw.nearfuture`)"
      - "traefik.http.routers.ex.entrypoints=web"
      - "traefik.http.routers.ex-ssl.rule=Host(`excalidraw.nearfuture`)"
      - "traefik.http.routers.ex-ssl.entrypoints=websecure"
      - "traefik.http.routers.ex-ssl.tls=true"
      - "traefik.http.routers.ex-ssl-ext.rule=Host(`excalidraw.nearfuture.industries`)"
      - "traefik.http.routers.ex-ssl-ext.entrypoints=websecure"
      - "traefik.http.routers.ex-ssl-ext.tls=true"
      - "traefik.http.routers.ex-ssl-ext.tls.certresolver=myresolver"
      - "traefik.http.routers.ex-ssl-ext.middlewares=authentik@file"
      - "com.centurylinklabs.watchtower.scope=watch"
networks:
  proxy:
    external: true