services:
  broker:
    image: docker.io/library/redis:8
    restart: unless-stopped
    volumes:
      - /var/lib/containers/paperless-ng/redis:/data
  db:
    image: docker.io/library/postgres:18
    restart: unless-stopped
    volumes:
      - /var/lib/containers/paperless-ng/postgresql:/var/lib/postgresql
    environment:
      POSTGRES_DB: paperless
      POSTGRES_USER: paperless
      POSTGRES_PASSWORD: paperless
  webserver:
    image: ghcr.io/paperless-ngx/paperless-ngx:latest
    restart: unless-stopped
    depends_on:
      - db
      - broker
      - gotenberg
      - tika
    networks:
      container-public:
        ipv4_address:  192.168.3.55
      default:
    ports:
      - "8000:8000"
    volumes:
      - /var/lib/containers/paperless-ng/data:/usr/src/paperless/data
      - /var/lib/containers/paperless-ng/media:/usr/src/paperless/media
      - /var/lib/containers/paperless-ng/export:/usr/src/paperless/export
      - /var/lib/containers/paperless-ng/consume:/usr/src/paperless/consume
    env_file: docker-compose.env
    environment:
      PAPERLESS_REDIS: redis://broker:6379
      PAPERLESS_DBHOST: db
      PAPERLESS_TIKA_ENABLED: 1
      PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
      PAPERLESS_TIKA_ENDPOINT: http://tika:9998
      PAPERLESS_APPS: allauth.socialaccount.providers.openid_connect
      PAPERLESS_REDIRECT_LOGIN_TO_SSO: true
      PAPERLESS_SOCIALACCOUNT_PROVIDERS: '{ "openid_connect": { "APPS": [ { "provider_id": "authelia","name": "Authelia","client_id": "paperless","secret": "mGSTy5JyQ6MpFqPWvdryz.7Cs2gGGQiJFAGAo4hQ.0kLWBfJF0hHMhLhA8R1yeU9Bt0Tvx5n","settings": { "server_url": "https://auth.rescla.me/.well-known/openid-configuration" } } ] } }'
  gotenberg:
    image: docker.io/gotenberg/gotenberg:8.25
    restart: unless-stopped
    # The gotenberg chromium route is used to convert .eml files. We do not
    # want to allow external content like tracking pixels or even javascript.
    command:
      - "gotenberg"
      - "--chromium-disable-javascript=true"
      - "--chromium-allow-list=file:///tmp/.*"
  tika:
    image: docker.io/apache/tika:latest
    restart: unless-stopped
networks:
  container-public:
    name: container-public
    external: true