services:
  Unifi-Controller:
    env_file:
      - unifi.env
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=PST
      - RUNAS_UID0=false
      - LOTSOFDEVICES=true
    hostname: unifi
    image: jacobalberty/unifi:latest
    networks:
      - traefik_backend
    ports:
      - target: 8443
        published: 8443
        protocol: tcp
        mode: host
      - target: 3478
        published: 3478
        protocol: udp
        mode: host
      - target: 10001
        published: 10001
        protocol: udp
        mode: host
      - target: 8080
        published: 8080
        protocol: tcp
        mode: host
      - target: 1900
        published: 1900
        protocol: udp
        mode: host
      - target: 8843
        published: 8843
        protocol: tcp
        mode: host
      - target: 8880
        published: 8880
        protocol: tcp
        mode: host
      - target: 6789
        published: 6789
        protocol: tcp
        mode: host
      - target: 5514
        published: 5514
        protocol: udp
        mode: host
    volumes:
      - "/volume1/docker/Unifi:/unifi"
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.unifi-network.entrypoints=websecure
        - traefik.http.routers.unifi-network.rule=${UNIFI_RULE}
        - traefik.http.routers.unifi-network.tls=true
        - traefik.http.routers.unifi-network.tls.certresolver=letsencrypt
        - traefik.http.services.unifi-network.loadbalancer.server.port=8443
        - traefik.http.services.unifi-network.loadbalancer.server.scheme=https
        - traefik.http.routers.unifi-network.service=unifi-network
        - traefik.http.routers.unifi-network.middlewares=crowdsec@file
        - traefik.swarm.network=backend
        - autoheal=true
      resources:
        limits:
          cpus: '4'
          memory: 2G
      placement:
        constraints:
           - node.hostname==docker-2

networks:
  traefik_backend:
    external: true