---
services:
  transfer:
    image: dutchcoders/transfer.sh:${TSH_VERSION}
    command: --provider ${TSH_PROVIDER}
    restart: unless-stopped
    environment:
      - LISTENER=${TSH_LISTENER}
      - PROFILE_LISTENER=${TSH_PROFILE_LISTENER}
      - FORCE_HTTPS=${TSH_FORCE_HTTPS}
      - TLS_LISTENER=${TSH_TLS_LISTENER}
      - TLS_LISTENER_ONLY=${TSH_TLS_LISTENER_ONLY}
      - TLS_CERT_FILE=${TSH_TLS_CERT_FILE}
      - TLS_PRIVATE_KEY=${TSH_TLS_PRIVATE_KEY}
      - HTTP_AUTH_USER=${TSH_HTTP_AUTH_USER}
      - HTTP_AUTH_PASS=${TSH_HTTP_AUTH_PASS}
      - HTTP_AUTH_HTPASSWD=${TSH_HTTP_AUTH_HTPASSWD}
      - HTTP_AUTH_IP_WHITELIST=${TSH_HTTP_AUTH_IP_WHITELIST}
      - IP_WHITELIST=${TSH_IP_WHITELIST}
      - IP_BLACKLIST=${TSH_IP_BLACKLIST}
      - TEMP_PATH=${TSH_TEMP_PATH}
      - PROXY_PATH=${TSH_PROXY_PATH}
      - PROXY_PORT=${TSH_PROXY_PORT}
      - EMAIL_CONTACT=${TSH_EMAIL_CONTACT}
      - GA_KEY=${TSH_GA_KEY}
      - USERVOICE_KEY=${TSH_USERVOICE_KEY}
      - AWS_ACCESS_KEY=${TSH_AWS_ACCESS_KEY}
      - AWS_SECRET_KEY=${TSH_AWS_SECRET_KEY}
      - BUCKET=${TSH_BUCKET}
      - S3_ENDPOINT=${TSH_S3_ENDPOINT}
      - S3_REGION=${TSH_S3_REGION}
      - S3_NO_MULTIPART=${TSH_S3_NO_MULTIPART}
      - S3_PATH_STYLE=${TSH_S3_PATH_STYLE}
      - STORJ_ACCESS=${TSH_STORJ_ACCESS}
      - STORJ_BUCKET=${TSH_STORJ_BUCKET}
      - BASEDIR=${TSH_BASEDIR}
      - GDRIVE_CLIENT_JSON_FILEPATH=${TSH_GDRIVE_CLIENT_JSON_FILEPATH}
      - GDRIVE_LOCAL_CONFIG_PATH=${TSH_GDRIVE_LOCAL_CONFIG_PATH}
      - GDRIVE_CHUNK_SIZE=${TSH_GDRIVE_CHUNK_SIZE}
      - HOSTS=${TSH_HOSTS}
      - LOG=${TSH_LOG}
      - CORS_DOMAINS=${TSH_CORS_DOMAINS}
      - CLAMAV_HOST=${TSH_CLAMAV_HOST}
      - PERFORM_CLAMAV_PRESCAN=${TSH_PERFORM_CLAMAV_PRESCAN}
      - RATE_LIMIT=${TSH_RATE_LIMIT}
      - MAX_UPLOAD_SIZE=${TSH_MAX_UPLOAD_SIZE}
      - PURGE_DAYS=${TSH_PURGE_DAYS}
      - PURGE_INTERVAL=${TSH_PURGE_INTERVAL}
      - RANDOM_TOKEN_LENGTH=${TSH_RANDOM_TOKEN_LENGTH}
    labels:
      ### Section Træfik
      - traefik.enable=${TRAEFIK_ENABLED}
      - traefik.docker.network=${TRAEFIK_NETWORK}
      ## HTTP
      - traefik.http.routers.http-${TRAEFIK_ROUTER}.entrypoints=http
      # redirect to HTTPS only
      - traefik.http.routers.http-${TRAEFIK_ROUTER}.middlewares=${TRAEFIK_HTTP_MIDDLEWARES}
      - traefik.http.routers.http-${TRAEFIK_ROUTER}.rule=${TRAEFIK_MATCHRULE}
      ## HTTPS
      - traefik.http.routers.https-${TRAEFIK_ROUTER}.entrypoints=https
      # configure the exposed service
      - traefik.http.routers.https-${TRAEFIK_ROUTER}.middlewares=${TRAEFIK_HTTPS_MIDDLEWARES}
      - traefik.http.routers.https-${TRAEFIK_ROUTER}.rule=${TRAEFIK_MATCHRULE}
      # enable TLS and its certificate provider
      - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls=${TRAEFIK_TLSENABLED}
      - traefik.http.routers.https-${TRAEFIK_ROUTER}.tls.certresolver=${TRAEFIK_CERTRESOLVER}
      # specify a service so a custom port can be used
      - traefik.http.services.${TRAEFIK_SERVICE}.loadbalancer.server.port=${TRAEFIK_SERVICE_PORT}
      ### Section Diun
      - diun.enable=${DIUN_ENABLE}
      - diun.watch_repo=${DIUN_WATCHREPO}
      - diun.sort_tags=${DIUN_SORTALGO}
      - diun.include_tags=${DIUN_INCLUDE}
      - diun.exclude_tags=${DIUN_EXCLUDE}
    networks:
      - traefik
    volumes:
      - ${TSH_DATA}:/data

networks:
  traefik:
    external: true
    name: ${TRAEFIK_NETWORK}