services:

  n8n:
    image: docker.n8n.io/n8nio/n8n
    restart: always
    networks:
      - frontend
    labels:
      - traefik.enable=true
      - traefik.http.routers.n8n.rule=Host(`alfred.sebastiangedigk.com`) 
      - traefik.http.routers.n8n.tls=true
      - traefik.http.routers.n8n.entrypoints=web,websecure
      - traefik.http.routers.n8n.tls.certresolver=cloudflare
      - traefik.http.services.n8n_lb.loadBalancer.server.port=5678
      - traefik.http.routers.n8n.service=n8n_lb
      - traefik.http.middlewares.n8n.headers.SSLRedirect=true
      - traefik.http.middlewares.n8n.headers.STSSeconds=315360000
      - traefik.http.middlewares.n8n.headers.browserXSSFilter=true
      - traefik.http.middlewares.n8n.headers.contentTypeNosniff=true
      - traefik.http.middlewares.n8n.headers.forceSTSHeader=true
      - traefik.http.middlewares.n8n.headers.SSLHost=sebastiangedigk.com
      - traefik.http.middlewares.n8n.headers.STSIncludeSubdomains=true
      - traefik.http.middlewares.n8n.headers.STSPreload=true
      - traefik.http.routers.n8n.middlewares=n8n@docker
    environment:
      - N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true
      - N8N_HOST=alfred.sebastiangedigk.com
      - N8N_PORT=5678
      - N8N_PROTOCOL=https
      - N8N_RUNNERS_ENABLED=true
      - N8N_TRUST_PROXY=true
      - N8N_PROXY_HOPS=1
      - NODE_ENV=production
      - WEBHOOK_URL=https://alfred.sebastiangedigk.com/
      - GENERIC_TIMEZONE=${GENERIC_TIMEZONE}
      - TZ=${GENERIC_TIMEZONE}
    volumes:
      - n8n_data:/home/node/.n8n
      - ./local-files:/files

volumes:
  n8n_data:

networks:
  frontend:
    external: true