services:
  recipe:
    container_name: mealie
    image: ghcr.io/mealie-recipes/mealie:latest
    restart: always
    ports:
      - 9925:9000
    environment:
      PUID: 1001
      PGID: 998
      TZ: America/Chicago
      ALLOW_SIGNUP: "true"
      MAX_WORKERS: 1
      WEB_CONCURRENCY: 1
      OIDC_AUTH_ENABLED=true
      OIDC_PROVIDER_NAME=authentik
      OIDC_CONFIGURATION_URL=https://auth.netgrimoire.com/application/o/oauth/mealie/.well-known/openid-configuration
      #OIDC_CONFIGURATION_URL=https://authentik.company/application/o/<application_slug>/.well-known/openid-configuration
      OIDC_CLIENT_ID=tidMeWe3Ak30zRzcmC5vwoCqAIHXQsaVwJEp44Mz
      OIDC_CLIENT_SECRET=OD0CLgELUEWGoZ8IUnduGbxhyhh4vgjMBxBAjyopNOkATWIEWSYeWRDdfY6ulX2Fj7zuUp9dpgzjoFatNviLD8E5Cv2815eDrZxH9gNb52Taur0LzqBPk25yLCvsnjXK
      OIDC_SIGNUP_ENABLED=true
      OIDC_USER_GROUP=mealie-users
      OIDC_ADMIN_GROUP=mealie-admins
      OIDC_AUTO_REDIRECT=true   # Optional: The login page will be bypassed and you will be sent directly to your Identity Provider.
      OIDC_REMEMBER_ME=true  


    networks:
      - netgrimoire

    deploy:
      labels:
   #     - homepage.tab=PNCHarris
        - homepage.group=PNCHarris Apps
        - homepage.name=Mealie
        - homepage.icon=mealie.png
        - homepage.href=http://Recipe.netgrimoire.com
        - homepage.description=Recipe Manager
        - kuma.mealie.http.name="Mealie"
        - kuma.mealie.http.url=http://recipe:9000
        - caddy=recipe.netgrimoire.com
        - caddy.import=authentik
        - caddy.reverse_proxy="{{upstreams 9000}}"
  
    volumes:
      - /data/nfs/Baxter/Docker/mealie:/app/data
      


networks:
  netgrimoire:
    external: true