services:
  broker:
    image: docker.io/library/redis:8
    restart: unless-stopped
    volumes:
      - redisdata:/data
  
  db:
    image: docker.io/library/postgres:17
    restart: unless-stopped
    volumes:
      - pgdata:/var/lib/postgresql/data
      - backup:/backup
    environment:
      POSTGRES_DB: paperless
      POSTGRES_USER: paperless
      POSTGRES_PASSWORD: paperless
  
  webserver:
    image: ghcr.io/paperless-ngx/paperless-ngx:2.20.3
    restart: unless-stopped
    depends_on:
      - db
      - broker
      - gotenberg
      - tika
    ports:
      - "8010:8000"
    healthcheck:
      test: ["CMD", "curl", "-fs", "-S", "--max-time", "2", "http://localhost:8000"]
      interval: 30s
      timeout: 10s
      retries: 5
    labels:
      - "com.centurylinklabs.watchtower.monitor-only=true"
    volumes:
      - data:/usr/src/paperless/data
      - media:/usr/src/paperless/media
      - export:/usr/src/paperless/export
      - consume:/usr/src/paperless/consume
    environment:
      PAPERLESS_REDIS: redis://broker:6379
      PAPERLESS_DBHOST: db
      PAPERLESS_TIKA_ENABLED: 1
      PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
      PAPERLESS_TIKA_ENDPOINT: http://tika:9998
      PAPERLESS_TIME_ZONE: Europe/Berlin
      PAPERLESS_URL: https://dm.scheidel.biz
      PAPERLESS_ALLOWED_HOSTS: 192.168.2.102
      PAPERLESS_DISABLE_REGULAR_LOGIN: true
      PAPERLESS_LOGOUT_REDIRECT_URL: https://auth.scheidel.biz/application/o/paperless-ngx/end-session/
      PAPERLESS_APPS: "allauth.socialaccount.providers.openid_connect"
      PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{"openid_connect": {"APPS": [{"provider_id": "authentik","name": "Authentik SSO","client_id": "IeXOJxc5aSu74WwPM22zh4Nv1ulGYcObgtBhQ4JV","secret": "BxmWP5Xejxd3JoafNxSw83So5q3HOZHoe39Ui66c5qV6H5wM2CJNGcX5nXsCd1lNQe8tPVcLrISwvEpRXWtG7v1Rvc5M6fQW4K5sUgxbDCxoUxcceVN3WCGoDQYw9jZ7","settings": { "server_url": "https://auth.scheidel.biz/application/o/paperless-ngx/.well-known/openid-configuration"}}]}}'
      PAPERLESS_OCR_LANGUAGE: deu+eng
      PAPERLESS_CONSUMPTION_DIR: ../consume
      PAPERLESS_OCR_USER_ARGS: '{"invalidate_digital_signatures": true}'
      PAPERLESS_CONSUMER_ENABLE_ASN_BARCODE: true
      PAPERLESS_EMAIL_HOST: smtp.strato.de
      PAPERLESS_EMAIL_PORT: 465
      PAPERLESS_EMAIL_HOST_USER: michael.scheidel@scheidel.biz
      PAPERLESS_EMAIL_FROM: paperless-ngx@scheidel.biz 
      PAPERLESS_EMAIL_HOST_PASSWORD: ?EAM?Yes!01
      PAPERLESS_EMAIL_USE_TLS: false
      PAPERLESS_EMAIL_USE_SSL: true
      USERMAP_UID: 1000
      USERMAP_GID: 100

  gotenberg:
    image: docker.io/gotenberg/gotenberg:8.23.0
    restart: unless-stopped
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
      - "--chromium-allow-list=file:///tmp/.*"

  tika:
    image: docker.io/apache/tika:latest
    restart: unless-stopped
    
  syncthing:
    image: lscr.io/linuxserver/syncthing:latest
    container_name: syncthing
    restart: unless-stopped 
    network_mode: bridge
    ports:
      - "8384:8384"    # Web-GUI
      - "22000:22000/tcp"
      - "22000:22000/udp"
      - "21027:21027/udp" # Discovery
    environment:
      - PUID=1000        
      - PGID=100        
      - TZ=Europe/Berlin
    volumes:
      - syncthing:/config
      - media:/media
    
volumes:
  backup:
  data:
  media:
  pgdata:
  redisdata:
  export:
  consume:
  syncthing: