services:
  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Moscow
      - WEBUI_PORT=8080
    volumes:
      - ./qbittorrent/config:/config
      - ./qbittorrent/downloads:/downloads
    networks:
      - traefik_proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.qbittorrent.rule=Host(`qbit.kzbrd.ru`)"
      - "traefik.http.routers.qbittorrent.entrypoints=websecure" # Используем HTTPS entrypoint
      - "traefik.http.routers.qbittorrent.tls=true"
      - "traefik.http.routers.qbittorrent.tls.certresolver=myresolver" # Используем единый резолвер
      - "traefik.http.services.qbittorrent.loadbalancer.server.port=8080"
      # Дополнительные security headers
      - "traefik.http.routers.qbittorrent.middlewares=qbittorrent-headers"
      - "traefik.http.middlewares.qbittorrent-headers.headers.sslredirect=true"
      - "traefik.http.middlewares.qbittorrent-headers.headers.stsincludesubdomains=true"
      - "traefik.http.middlewares.qbittorrent-headers.headers.stspreload=true"
      - "traefik.http.middlewares.qbittorrent-headers.headers.stsseconds=31536000"
    restart: unless-stopped

networks:
  traefik_proxy:
    external: true