networks:
  proxy_net:
    name: "proxy-net"
    external: true
services:
  caldav:
    image: tomsquest/docker-radicale
    container_name: caldav-stvnliu-me
    networks:
      - proxy_net
    init: true
    read_only: false
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - SETUID
      - SETGID
      - CHOWN
      - KILL
    deploy:
      resources:
        limits:
          memory: 256M
          pids: 50
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.radicale.rule=Host(`cal.stvnliu.me`) && PathPrefix(`/radicale/`)"
      - "traefik.http.routers.radicale.entrypoints=websecure"
      - "traefik.http.services.radicale.loadbalancer.server.port=5232"
      - "traefik.http.middlewares.radicale-scriptname.headers.customrequestheaders.X-Script-Name=/radicale"
      - "traefik.http.routers.radicale.middlewares=radicale-scriptname"
    restart: unless-stopped
    volumes:
      - ./data:/data
      - ./config:/config:ro