services:
  czkawka:
    image: lscr.io/linuxserver/czkawka:latest
    networks:
      - netgrimoire

    environment:
      TZ: America/Chicago
      PUID: "1964"
      PGID: "1964"

    # Match your standard execution model
    # user: "1964:1964"

    volumes:
      # App config (non-SQLite → znas)
      - /DockerVol/czkawka:/config

      # Media scan target (read-only for safety)
      - /export/Green/media/clips/library:/data

    ports:
      - target: 3000
        published: 3025
        protocol: tcp
        mode: ingress

      - target: 3001
        published: 3026
        protocol: tcp
        mode: ingress

    deploy:
      placement:
        constraints:
          - node.hostname == znas


      labels:
        # Homepage
        homepage.group: "Nucking Apps"
        homepage.name: "Czkawka"
        homepage.icon: "czkawka.png"
        homepage.href: "https://czkawka.netgrimoire.com"
        homepage.description: "Duplicate file finder"

        # Kuma
        kuma.czkawka.http.name: "Czkawka"
        kuma.czkawka.http.url: "http://czkawka:3000"

        # Caddy
        caddy: "dupes.netgrimoire.com"
        caddy.import: "authentik"
        caddy.reverse_proxy: "{{upstreams 3000}}"

        # Diun
        diun.enable: "true"

networks:
  netgrimoire:
    external: true