version: "3"

services:
  freshrss:
    image: freshrss/freshrss:latest
    container_name: freshrss
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.freshrss.rule=Host(`${VIRTUAL_HOST}`)"
      - "traefik.http.routers.freshrss.entrypoints=websecure"
      - "traefik.http.routers.freshrss.tls=true"
      - "traefik.http.routers.freshrss.tls.certresolver=myresolver"
      - "traefik.http.services.freshrss.loadbalancer.server.port=80"
      - "traefik.docker.network=http-proxy"
    networks:
      - http-proxy
      - internal
    depends_on:
      - db
    environment:
      TZ: "${FRESHRSS_TZ}"
      CRON_MIN: "${FRESHRSS_CRON_MIN}"
    volumes:
      - /srv/docker/freshrss/data:/var/www/FreshRSS/data
      - /srv/docker/freshrss/extensions:/var/www/FreshRSS/extensions

  db:
    image: postgres:17
    container_name: freshrss-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: "${POSTGRES_USER}"
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
      POSTGRES_DB: "${POSTGRES_DB}"
    volumes:
      - /srv/docker/freshrss/pgdata:/var/lib/postgresql/data
    networks:
      - internal

networks:
  http-proxy:
    external: true
  internal:
    driver: bridge