docker-compose.yaml

services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - TRAEFIK_LOG_LEVEL=DEBUG
    command:
      - --api.insecure=true
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entryPoints.web.address=:80
      - --entryPoints.websecure.address=:443
      - --certificatesresolvers.letsencrypt.acme.httpchallenge=true
      - --certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web
      - --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}
      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
      - --entrypoints.web.http.redirections.entryPoint.to=websecure
      - --entrypoints.web.http.redirections.entryPoint.scheme=https
      - --entrypoints.web.http.redirections.entrypoint.permanent=true
      - --accesslog=true
      - --log.level=DEBUG
    extra_hosts:
      - host.docker.internal:172.17.0.1
    ports:
      - 80:80
      - 443:443
    restart: unless-stopped
    volumes:
      - ./traefik/letsencrypt:/letsencrypt
      - /var/run/docker.sock:/var/run/docker.sock:ro
  overseerr:
    image: lscr.io/linuxserver/overseerr:latest
    container_name: overseerr
    volumes:
      - ./overseerr:/config
    ports:
      - 5055:5055
    restart: unless-stopped
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - LOG_LEVEL=${LOG_LEVEL}
    labels:
      - traefik.enable=true
      - traefik.http.routers.overseerr.rule=(Host(`${HOSTNAME}`))
      - traefik.http.routers.overseerr.tls=true
      - traefik.http.routers.overseerr.tls.certresolver=letsencrypt
      # - traefik.http.routers.overseerr.middlewares=authelia@docker
  series-sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: series-sonarr
    volumes:
      - ./series-sonarr:/config
      - ${MEDIA_DIR}:/data
    ports:
      - 8989:8989
    restart: unless-stopped
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - LOG_LEVEL=${LOG_LEVEL}
    labels:
      - traefik.enable=true
      - traefik.http.routers.series-sonarr.rule=(Host(`${HOSTNAME}`) && PathPrefix(`/series-sonarr`))
      - traefik.http.routers.series-sonarr.tls=true
      - traefik.http.routers.series-sonarr.tls.certresolver=letsencrypt
      # - traefik.http.routers.series-sonarr.middlewares=authelia@docker
  anime-sonarr:
    image: lscr.io/linuxserver/sonarr:latest
    container_name: anime-sonarr
    volumes:
      - ./anime-sonarr:/config
      - ${MEDIA_DIR}:/data
    ports:
      - 8988:8988
    restart: unless-stopped
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - LOG_LEVEL=${LOG_LEVEL}
    labels:
      - traefik.enable=true
      - traefik.http.routers.anime-sonarr.rule=(Host(`${HOSTNAME}`) && PathPrefix(`/anime-sonarr`))
      - traefik.http.routers.anime-sonarr.tls=true
      - traefik.http.routers.anime-sonarr.tls.certresolver=letsencrypt
      # - traefik.http.routers.anime-sonarr.middlewares=authelia@docker
  radarr:
    image: lscr.io/linuxserver/radarr:latest
    container_name: radarr
    volumes:
      - ./radarr:/config
      - ${MEDIA_DIR}:/data
    ports:
      - 7878:7878
    restart: unless-stopped
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - LOG_LEVEL=${LOG_LEVEL}
    labels:
      - traefik.enable=true
      - traefik.http.routers.radarr.rule=(Host(`${HOSTNAME}`) && PathPrefix(`/radarr`))
      - traefik.http.routers.radarr.tls=true
      - traefik.http.routers.radarr.tls.certresolver=letsencrypt
      # - traefik.http.routers.radarr.middlewares=authelia@docker
  prowlarr:
    image: lscr.io/linuxserver/prowlarr:latest
    container_name: prowlarr
    volumes:
      - ./prowlarr:/config
    ports:
      - 9696:9696
    restart: unless-stopped
    environment:
      - PGID=${GROUP_ID}
      - PUID=${USER_ID}
      - TZ=${TIMEZONE}
      - LOG_LEVEL=${LOG_LEVEL}
    labels:
      - traefik.enable=true
      - traefik.http.routers.prowlarr.rule=(Host(`${HOSTNAME}`) && PathPrefix(`/prowlarr`))
      - traefik.http.routers.prowlarr.tls=true
      - traefik.http.routers.prowlarr.tls.certresolver=letsencrypt
      # - traefik.http.routers.prowlarr.middlewares=authelia@docker
  recyclarr:
    image: recyclarr/recyclarr
    container_name: recyclarr
    volumes:
      - ./recyclarr:/config
    user: ${USER_ID}:${GROUP_ID}
    restart: unless-stopped
    read_only: true
    tmpfs: /tmp
    environment:
      - TZ=${TIMEZONE}
      - RECYCLARR_CREATE_CONFIG=true
      - ANIME_SONARR_API_KEY=${ANIME_SONARR_API_KEY}
      - SERIES_SONARR_API_KEY=${SERIES_SONARR_API_KEY}
      - RADARR_API_KEY=${RADARR_API_KEY}
  # authelia:
  #   image: authelia/authelia:latest
  #   container_name: authelia
  #   volumes:
  #     - ./authelia:/config
  #   ports:
  #     - 9091:9091
  #   restart: unless-stopped
  #   environment:
  #     - PGID=${GROUP_ID}
  #     - PUID=${USER_ID}
  #     - TZ=${TIMEZONE}
  #   labels:
  #     - traefik.enable=true
  #     - traefik.http.routers.prowlarr.rule=(Host(`${HOSTNAME}`) && PathPrefix(`/authelia`))
  #     - traefik.http.routers.authelia.entrypoints=https
  #     - traefik.http.routers.authelia.tls=true
  #     - traefik.http.routers.authelia.tls.certresolver=letsencrypt
  #     - traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/authz/forward-auth  # yamllint disable-line rule:line-length
  #     - traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true
  #     - traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email  # yamllint disable-line rule:line-length