services:
  {{ app_name }}:
    image: {{ arcane_image_name }}
    container_name: {{ app_name }}
    ports:
      - {{ arcane_webui_port }}:3552
    networks:
{% if app_proxy_network is not none %}
      {{ app_proxy_network }}:
{% else %}
      {{ app_name ~ "-net" }}:
{% endif %}
    volumes:
      - {{ docker_socket_path }}:/var/run/docker.sock
      - ./{{ arcane_data_dir }}:/app/data
      - {{ docker_apps_dir }}:/app/data/projects
    environment:
      - APP_URL=http://{{ app_base_domain }}:{{ arcane_webui_port }}
      - PUID=1000
      - PGID=1000
      - ENCRYPTION_KEY={{ arcane_encrypt_key }}
      - JWT_SECRET={{ arcane_swt_key }}
    restart: unless-stopped
{% if app_proxy_network is not none %}
    labels:
      traefik.enable: true
      traefik.docker.network: "{{ app_proxy_network }}"
      traefik.http.routers.{{ app_name }}-http.rule: "Host(`{{ app_base_domain }}`)"
      traefik.http.routers.{{ app_name }}-http.entryPoints: web
      traefik.http.services.{{ app_name }}.loadbalancer.server.port: 3552
{% endif %}

networks:
{% if app_proxy_network is not none %}
  {{ app_proxy_network }}:
    external: true
{% else %}
  {{ app_name ~ "-net" }}:
{% endif %}