version: "3"
services:
  rss:
    image: wangqiru/ttrss:latest
    container_name: ttrss
    ports:
      - 181:80
    environment:
      - SELF_URL_PATH=http://192.168.178.43:181/
      - DB_PASS=ttrss # use the same password defined in `database.postgres`
      - PUID=1000
      - PGID=1000
    volumes:
      - feed-icons:/var/www/feed-icons/
    dns:
      - 1.1.1.1
    networks:
      traefik_net:
      database_only:
    restart: always
    labels:
      - traefik.enable=true
      - traefik.http.routers.ttrss.rule=Host(`rss.ghoscht.com`)
      - traefik.http.routers.ttrss.entrypoints=websecure
      - traefik.http.services.ttrss.loadbalancer.server.port=80
      - traefik.http.routers.ttrss.tls=true
      - traefik.http.routers.ttrss.tls.certresolver=lencrypt
  database.postgres:
    image: postgres:13-alpine
    container_name: ttrss-postgres
    environment:
      - POSTGRES_PASSWORD=ttrss # feel free to change the password
    volumes:
      - ~/postgres/data/:/var/lib/postgresql/data # persist postgres data to ~/postgres/data/ on the host
    networks:
      - database_only
    restart: always
volumes:
  feed-icons:
networks:
  public_access: # Provide the access for ttrss UI
  service_only: # Provide the communication network between services only
    internal: true
  database_only: # Provide the communication between ttrss and database only
    internal: true
  traefik_net:
    name: traefik-net
    driver: bridge
    external: true