version: '3'

networks:
  traefik:
    external: true

services:
  radicale:
    restart: always
    image: mailu/radicale:1.9
    container_name: radicale
    volumes:
      - {{ data_dir }}:/data
      - {{ service_dir }}/config:/radicale
    command: radicale -S -C /radicale/radicale.conf
    networks:
      - traefik
    labels:
      - traefik.enable=true
      - traefik.http.routers.radicale.entrypoints=websecure
      - traefik.http.routers.radicale.rule=Host(`{{ dav_domain }}`)
      - traefik.http.routers.radicale.tls=true
      - traefik.http.routers.radicale.tls.certresolver=letsencrypt
      - traefik.http.routers.radicale.service=radicale
      - traefik.http.services.radicale.loadbalancer.server.port=5232