services:
  prowlarr:
    hostname: prowlarr.docker
    environment:
      PUID: "${HOST_UID}"
      PGID: "${HOST_GID}"
      # RUNTIPI Environment
      RUNTIPI_APP_PORT: "${APP_PORT}"
      RUNTIPI_APP_ID: "${APP_ID}"
      RUNTIPI_APP_DATA_DIR: "${APP_DATA_DIR}"
      RUNTIPI_APP_EXPOSED: "${APP_EXPOSED:-}"
      RUNTIPI_APP_DOMAIN: "${APP_DOMAIN}"
      RUNTIPI_APP_HOST: "${APP_HOST}"
      RUNTIPI_LOCAL_DOMAIN: "${LOCAL_DOMAIN}"
      RUNTIPI_DOMAIN: "${DOMAIN}"
      RUNTIPI_ROOT_DOMAIN: "${ROOT_DOMAIN}"
    labels:
    # Websecure
      traefik.http.routers.prowlarr.middlewares: authentik_sysmgr@file
    #   traefik.http.routers.prowlarr.middlewares: lan-only@file
      traefik.http.routers.prowlarr.rule: Host(`prowlarr.${ROOT_DOMAIN}`)${APP_ROUTE_OPTIONAL:-}
    #   traefik.http.routers.prowlarr-more.entrypoints: websecure
    #   traefik.http.routers.prowlarr-more.service: prowlarr
    #   traefik.http.routers.prowlarr-more.middlewares: authentik_sysmgr@file
    #   traefik.http.routers.prowlarr-more.middlewares: lan-only@file
    #   traefik.http.routers.prowlarr-more.tls: true
    #   traefik.http.routers.prowlarr-more.tls.certresolver: myresolver