services:
  trilium:
    image: ${TRILIUM_IMAGE}
    container_name: trilium
    pull_policy: always
    restart: unless-stopped
    hostname: ${TRILIUM_HOSTNAME}

    environment:
      TZ: ${TZ}

    volumes:
      - /opt/trilium/data:/home/node/trilium-data:Z

    expose:
      - "8080"

    networks:
      - proxy

    labels:
      traefik.http.services.trilium.loadbalancer.server.port: "8080"

      traefik.http.middlewares.trilium-sec.headers.stsSeconds: "31536000"
      traefik.http.middlewares.trilium-sec.headers.stsIncludeSubdomains: "true"
      traefik.http.middlewares.trilium-sec.headers.stsPreload: "true"
      traefik.http.middlewares.trilium-sec.headers.contentTypeNosniff: "true"
      traefik.http.middlewares.trilium-sec.headers.frameDeny: "true"

networks:
  proxy:
    external: true