picard.yml

version: "3.7"
services:

## MusicBrainz Picard – Music Management
  picard:
    container_name: picard
    image: mikenye/picard:latest
    networks:
      - traefik
#    ports:
#      - "5800:5800"
    volumes:
      - $USERDIR/docker/picard:/config
      - $USERDIR/dwnloads/:/downloads
      - /mnt/storage/music:/storage
    environment:
      - USER_ID=${PUID}
      - GROUP_ID=${PGID}
      - TZ=$TZ
      - UMASK=022
      - DISPLAY_WIDTH=1600
      - DISPLAY_HEIGHT=768
    labels:
      traefik.enable: "true"
      traefik.docker.network: traefik
      traefik.backend: picard
      traefik.protocol: http
      traefik.port: 5800
      traefik.frontend.rule: Host:picard.${DOMAINNAME}
      traefik.frontend.auth.forward.address: http://traefik-forward-auth:4181
      traefik.frontend.auth.forward.authResponseHeaders: X-Forwarded-User
      traefik.frontend.auth.forward.trustForwardHeader: "true"
      traefik.frontend.passHostHeader: "true"
      traefik.frontend.headers.SSLForceHost: "true"
      traefik.frontend.headers.SSLHost: picard.${DOMAINNAME}
      traefik.frontend.headers.SSLRedirect: "true"
      traefik.frontend.headers.browserXSSFilter: "true"
      traefik.frontend.headers.contentTypeNosniff: "true"
      traefik.frontend.headers.forceSTSHeader: "true"
      traefik.frontend.headers.STSSeconds: 315360000
      traefik.frontend.headers.STSIncludeSubdomains: "true"
      traefik.frontend.headers.STSPreload: "true"
      traefik.frontend.headers.customResponseHeaders: X-Robots-Tag:noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex
      traefik.frontend.headers.frameDeny: "true"
      traefik.frontend.headers.customFrameOptionsValue: 'allow-from https:${DOMAINNAME}'
    restart: always

networks:
  traefik:
    external: true