services:
  rustical:
    # Note that you are expected to run RustiCal behind a reverse proxy with HTTPS. (The frontend will only work on non-localhost addresses with https) and clients like Apple Calendar also expect HTTPS.
    image: ghcr.io/lennart-k/rustical:latest
    container_name: rustical
    restart: unless-stopped
    user: 1001:1001
    environment:
      PUID: 1001
      PGID: 1001
      #RUSTICAL_FRONTEND__ALLOW_PASSWORD_LOGIN: "false"
      #OPTIONAL_YOUR_CONFIG_TOML:/etc/rustical/config.toml 
      #RUSTICAL_OIDC__NAME: "Authelia"
      #RUSTICAL_OIDC__ISSUER: "https://auth.example.com"
      #RUSTICAL_OIDC__CLIENT_ID: "{{ rustical_oidc_client_id }}"
      #RUSTICAL_OIDC__CLIENT_SECRET: "{{ rustical_oidc_client_secret }}"
      #RUSTICAL_OIDC__CLAIM_USERID: "preferred_username"
      #RUSTICAL_OIDC__SCOPES: '["openid", "profile", "groups"]'
      #RUSTICAL_OIDC__REQUIRE_GROUP: "app:rustical" # optional
      #RUSTICAL_OIDC__ALLOW_SIGN_UP: "true"
    volumes:
      - /srv/docker/office/rustical:/var/lib/rustical
    labels:
      - homepage.group=Utilities
      - homepage.name=RustiCal
      - homepage.icon=rustical.png
      - homepage.href=${RUSTICAL_URL}
      - homepage.description=Calendar Server
      - dockhand.url=${RUSTICAL_URL}
      - rackpeek.tags=utilities
    ports:
      - 4000:4000
    networks:
      - proxy-net
    
networks:
  proxy-net:
    external: true