services:
  kasm:
    image: ${KASM_IMAGE}
    pull_policy: always
    container_name: kasm
    restart: unless-stopped
    privileged: true
    environment:
      TZ: ${TZ}
      KASM_PORT: "443"
    volumes:
      - ${KASM_OPT_PATH}:/opt:Z
    networks:
      - proxy
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_DOCKER_NETWORK}"
      traefik.http.routers.kasm.rule: "Host(`${KASM_DOMAIN}`)"
      traefik.http.routers.kasm.entrypoints: "${TRAEFIK_ENTRYPOINT_SECURE}"
      traefik.http.routers.kasm.tls: "true"
      traefik.http.routers.kasm.tls.certresolver: "${TRAEFIK_CERTRESOLVER}"
      traefik.http.routers.kasm.middlewares: "crowdsec-bouncer@file,${TRAEFIK_AUTH_MIDDLEWARE}"
      traefik.http.services.kasm.loadbalancer.server.port: "3000"
      traefik.http.services.kasm.loadbalancer.server.scheme: "https"
      traefik.http.services.kasm.loadbalancer.passhostheader: "true"
      homepage.group: "Infraestructura"
      homepage.name: "Kasm"
      homepage.icon: "https://www.kasmweb.com/favicon.ico"
      homepage.description: "Workspaces en navegador"
      homepage.href: "https://${KASM_DOMAIN}"
      homepage.siteMonitor: "https://kasm:3000/"
      homepage.weight: "350"

networks:
  proxy:
    external: true