services:
  remark42:
    image: ghcr.io/umputun/remark42:v1.16.4
    container_name: remark42
    restart: unless-stopped
    environment:
      - REMARK_URL=https://remark.xiteng.site
      - SECRET=60719f2fbf0c4fff4fffb3c3fa9a385953402601caf4324d734985c0afd9f7a9
      - SITE=remark
      - TRUSTED_PROXY=172.18.0.0/16
      - AUTH_ANON=false
      - AUTH_CUSTOM_NAME=Authentik
      - AUTH_CUSTOM_CID=remark42-acd7c6f8
      - AUTH_CUSTOM_CSEC=cb2163478f1959c7d900e98a9f0f89ef6ce9345989dc5043cd7442c33f56edb5
      - AUTH_CUSTOM_AUTH_URL=https://auth.xiteng.site/application/o/authorize/
      - AUTH_CUSTOM_TOKEN_URL=https://auth.xiteng.site/application/o/token/
      - AUTH_CUSTOM_INFO_URL=https://auth.xiteng.site/application/o/userinfo/
      - AUTH_CUSTOM_SCOPES=openid,profile,email
    volumes:
      - ./var:/srv/var
    labels:
      # ========== Traefik ==========
      - "traefik.enable=true"
      # HTTPS
      - "traefik.http.routers.remark42.rule=Host(`remark.xiteng.site`)"
      - "traefik.http.routers.remark42.entrypoints=websecure"
      - "traefik.http.routers.remark42.tls=true"
      - "traefik.http.routers.remark42.tls.certresolver=cfresolver"
      - "traefik.http.services.remark42.loadbalancer.server.port=8080"
      # HTTP (Cloudflare Tunnel)
      - "traefik.http.routers.remark42-http.rule=Host(`remark.xiteng.site`)"
      - "traefik.http.routers.remark42-http.service=remark42"
      - "traefik.http.routers.remark42-http.entrypoints=web"
      - "xiteng.site.cache.remark42.enabled=true"
      - "xiteng.site.cache.remark42.routers=remark42,remark42-http"
      - "xiteng.site.cache.remark42.paths=/assets/,/static/,/js/,/css/"
      - "xiteng.site.cache.remark42.edge-ttl=604800"
      - "xiteng.site.cache.remark42.stale-while-revalidate=86400"
      - "xiteng.site.component.remark42.enabled=true"
      - "xiteng.site.component.remark42.name=Remark42"
      - "xiteng.site.component.remark42.description=可嵌入页面的评论服务；匿名发表评论已关闭。"
      - "xiteng.site.component.remark42.section=services"
      - "xiteng.site.component.remark42.category=内容与互动"
      - "xiteng.site.component.remark42.endpoint=remark.xiteng.site"
      - "xiteng.site.component.remark42.access=sso"
      - "xiteng.site.component.remark42.access-label=发表评论需 Authentik"
      - "xiteng.site.component.remark42.icon=R42"
      - "xiteng.site.component.remark42.accent=green"
      - "xiteng.site.component.remark42.order=320"
      - "xiteng.site.component.remark42.monitor.enabled=true"
      - "xiteng.site.component.remark42.monitor.url=http://remark42:8080/ping"
    networks:
      - homelab_net

networks:
  homelab_net:
    external: true