version: "3.9"
services:
  nomadnet:
    image: ghcr.io/markqvist/nomadnet:master
    container_name: nomadnet
    restart: unless-stopped
    volumes:
      - /mnt/HoardingCow_docker_data/Nomadnet:/root/.nomadnetwork
      - /mnt/HoardingCow_docker_data/Reticulum:/root/.reticulum
    # Reticulum transport must be reachable directly (NOT through Traefik)
    ports:
      - "4242:4242"

  # rbrowser:
  #   build: 
  #     context: https://github.com/fr33n0w/rBrowser.git#main
  #   container_name: rbrowser
  #   restart: unless-stopped
  #   user: "1000:1000"
  #   depends_on:
  #     - nomadnet
  #   volumes:
  #     # share Reticulum identity + network state
  #     - /mnt/HoardingCow_docker_data/Reticulum:/home/appuser/.reticulum
  #   networks:
  #     - traefik-net
  #   labels:
  #     - "traefik.enable=true"
  #
  #     # HTTP → HTTPS
  #     - "traefik.http.routers.rns-http.rule=Host(`nomad.lazyworkhorse.net`)"
  #     - "traefik.http.routers.rns-http.entrypoints=web"
  #     - "traefik.http.routers.rns-http.middlewares=redirect-to-https"
  #
  #     # HTTPS protected by Authelia
  #     - "traefik.http.routers.rns-https.rule=Host(`nomad.lazyworkhorse.net`)"
  #     - "traefik.http.routers.rns-https.entrypoints=websecure"
  #     - "traefik.http.routers.rns-https.tls=true"
  #     - "traefik.http.routers.rns-https.tls.certresolver=njalla"
  #     - "traefik.http.routers.rns-https.middlewares=authelia-auth"
  #
  #     - "traefik.http.services.rns.loadbalancer.server.port=5000"

networks:
  traefik-net:
    external: true