services:
  torrserver:
    build: .
    restart: always
    ports:
      - "8090:8090"
    environment:
      TS_CONF_PATH: "/opt/ts/config"
      TS_LOG_PATH: "/opt/ts/log"
      TS_TORR_DIR: "/opt/ts/torrents"
      TS_PORT: "8090"
    volumes:
      - torrserver_config:/opt/ts/config
      - torrserver_log:/opt/ts/log
      - torrserver_torrents:/opt/ts/torrents
      # Путь к медиа на Synology (настрой под себя)
      - /mnt/synology_drive/media:/media:ro
    labels:
      - traefik.enable=true
      - traefik.http.routers.torrserver.rule=Host(`${TORR_SUBDOMAIN}.${DOMAIN_NAME}`)
      - traefik.http.routers.torrserver.tls=true
      - traefik.http.routers.torrserver.entrypoints=web,websecure
      - traefik.http.routers.torrserver.tls.certresolver=myresolver
      # Security headers (аналогично n8n)
      - traefik.http.middlewares.torrserver-headers.headers.SSLRedirect=true
      - traefik.http.middlewares.torrserver-headers.headers.STSSeconds=315360000
      - traefik.http.middlewares.torrserver-headers.headers.browserXSSFilter=true
      - traefik.http.middlewares.torrserver-headers.headers.contentTypeNosniff=true
      - traefik.http.middlewares.torrserver-headers.headers.forceSTSHeader=true
      - traefik.http.middlewares.torrserver-headers.headers.SSLHost=${DOMAIN_NAME}
      - traefik.http.middlewares.torrserver-headers.headers.STSIncludeSubdomains=true
      - traefik.http.middlewares.torrserver-headers.headers.STSPreload=true
      - traefik.http.routers.torrserver.middlewares=torrserver-headers@docker
    networks:
      - proxy

volumes:
  torrserver_config:
  torrserver_log:
  torrserver_torrents:

networks:
  proxy:
    external: true
    name: traefik_proxy