version: '3.5'

networks:
  default:
    external:
      name: traefik_default

services:
  grocy-frontend:
    image: lscr.io/linuxserver/grocy
    container_name: grocy-app
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - ${GROCY_ROOT}/data:/config
    environment:
      - USER_UID=1000
      - USER_GID=1000
    env_file: live.env
    labels:
      # Watchtower
      - "com.centurylinklabs.watchtower.enable=true"
      # Routes
      - "traefik.enable=true"
      - "traefik.http.routers.grocy.entrypoints=websecure"
      - "traefik.http.routers.grocy.rule=Host(`grocy.${DOMAIN}`)"
      - "traefik.http.routers.grocy.tls=true"
      - "traefik.http.routers.grocy.tls.certresolver=myresolver"
    networks:
      - default
    ports:
      - 9283:80