services:
  mealie:
    image: ${DOCKER_REGISTRY}ghcr.io/mealie-recipes/mealie:v2.8.0
    ports:
    - target: 9000
      published: 9925
      protocol: tcp
      mode: ingress
    deploy:
      resources:
        limits:
          memory: 1000M
      labels:
        homepage.container: mealie
        homepage.description: Recipe server
        homepage.group: Utils
        homepage.href: https://${APPNAME}.sectorq.eu
        homepage.icon: ${APPNAME}.png
        homepage.name: Mealie
        homepage.server: my-docker-swarm
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
    volumes:
    - data:/app/data/
    environment:
      ALLOW_SIGNUP: 'false'
      PUID: 1000
      PGID: 1000
      TZ: Europe/Bratislava
      BASE_URL: https://mealie.sectorq.eu
      OIDC_AUTH_ENABLED: 'true'
      OIDC_PROVIDER_NAME: authentik
      OIDC_CONFIGURATION_URL: https://auth.sectorq.eu/application/o/mealie/.well-known/openid-configuration
      OIDC_CLIENT_ID: QfrrMn3EzUqkb3ueFl8UQe983qCxr50O2eScPZ3b
      OIDC_CLIENT_SECRET: SN5QQJzEZO6kFbyZJ4JcaUbev1CH3VDFfyfB0oeJXo23r0Wx74xpfLS3OMAvoRW8QFxpaYwsRm492MHtZIHaofwf29yhjADHA2DABPecSGAm8V6JVU8m4HRSF3NjDyTV
      OIDC_SIGNUP_ENABLED: 'true'
      OIDC_USER_GROUP: mealie-users
      OIDC_ADMIN_GROUP: mealie-admins
      OIDC_AUTO_REDIRECT: 'true'
      OIDC_REMEMBER_ME: 'true'
volumes:
  data: