---
version: '3.7'
services:
  quassel-web:
    image: lscr.io/linuxserver/quassel-web:latest
    container_name: quassel-web
    environment:
      PUID: 1000
      PGID: 1000
      QUASSEL_CORE: ${QUASSEL_HOSTNAME}
      QUASSEL_PORT: 4242
      QUASSEL_HOSTNAME:
      TZ:
    expose: [ 64080/tcp ]
    labels:
      traefik.enable: true
      traefik.http.routers.quasselecho.entryPoints: websecure
      traefik.http.routers.quasselecho.middlewares: commonSSLHeaders
      traefik.http.routers.quasselecho.rule: Host(`${QUASSEL_HOSTNAME}`)
      traefik.http.routers.quasselecho.tls.certResolver: acmelive
    volumes:
      - ./quassel-web:/config
    restart: unless-stopped

  certdumper:
    image: humenius/traefik-certs-dumper
    command: '--restart-containers quassel-core'
    depends_on: [ quassel-web ]
    environment:
      DOMAIN: ${QUASSEL_HOSTNAME}
      OVERRIDE_GID: 1000
      OVERRIDE_UID: 1000
      QUASSEL_HOSTNAME:
      TZ:
    healthcheck:
      test: ["CMD", "/usr/bin/healthcheck"]
      interval: 30s
      timeout: 10s
      retries: 5
    init: true
    network_mode: none
    volumes:
      - ../traefik/acme:/traefik:ro
      - ./data/ssl/:/output:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro

  quassel-core:
    image: ghcr.io/linuxserver/quassel-core
    container_name: quassel-core
    depends_on: [ certdumper ]
    environment:
      AUTH_AUTHENTICATOR: Database
      DB_BACKEND: SQLite
      PGID: 1000
      PUID: 1000
      RUN_OPTS: --config-from-environment --require-ssl --ssl-cert /ssl/cert.pem --ssl-key /ssl/key.pem
      TZ:
    ports:
      - 4242:4242
      - 113:10113 #optional
    restart: unless-stopped
    volumes:
      - ./data/config:/config:rw
      - ./data/ssl:/ssl:ro

networks:
  default:
    name: traefik_internal
    external: true
...