services:
  privatebin:
    image: ${PRIVATEBIN_IMAGE}
    container_name: privatebin
    restart: unless-stopped
    read_only: true
    user: "65534:65534"
    volumes:
      - ${PRIVATEBIN_DATA_PATH}:/srv/data:Z
      - ./nginx-site.conf:/etc/nginx/http.d/site.conf:ro,Z
    networks:
      - proxy
    labels:
      prune.protect: "true"
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"

      # Router publico — permite abrir enlaces compartidos sin login.

      # Router protegido — crear/borrar requiere login.


      homepage.group: "Automatizacion y desarrollo"
      homepage.name: "PrivateBin"
      homepage.icon: "privatebin.png"
      homepage.href: "https://${PRIVATEBIN_DOMAIN}/"
      homepage.description: "Pastebin cifrado de extremo a extremo"
      homepage.siteMonitor: "https://${PRIVATEBIN_DOMAIN}/"

networks:
  proxy:
    external: true