version: '3'

services:

  traefik:
    image: traefik
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - \var\run\docker.sock:/var/run/docker.sock
      - .\traefik.yml:/etc/traefik/traefik.yml
      - .\authorized_users:/etc/traefik/authorized_users
      - .\acme.json:/acme.json
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.dashboard-http.entrypoints=http"
      - "traefik.http.routers.dashboard-http.rule=Host(`server.ava.kb28.ch`,`server.ava.jcloud.ik-server.com`)"
      - "traefik.http.routers.dashboard-http.middlewares=dashboard-redirect"
      - "traefik.http.middlewares.dashboard-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.dashboard-https.entrypoints=https"
      - "traefik.http.routers.dashboard-https.rule=(Host(`server.ava.kb28.ch`,`server.ava.jcloud.ik-server.com`)) && (PathPrefix(`/api`) || PathPrefix(`/dashboard`))"
      - "traefik.http.routers.dashboard-https.tls.certResolver=letsencrypt"
      - "traefik.http.routers.dashboard-https.service=api@internal"
      - "traefik.http.routers.dashboard-https.middlewares=dashboard-auth"
      - "traefik.http.middlewares.dashboard-auth.basicauth.usersfile=/etc/traefik/authorized_users"

  ollama:
    image: ollama/ollama
    restart: unless-stopped
    container_name: ollama
    ports:
      - '11434:11434'
    volumes:
      - './ollama:/root/.ollama'

  ollama-webui:
    image: 'ghcr.io/ollama-webui/ollama-webui:main'
    restart: unless-stopped
    container_name: ollama-webui
    volumes:
      - './ollama-webui:/app/backend/data'
    depends_on:
      - ollama
    ports:
      - 80:8080
    environment:
      - './ollama/api=http://ollama:11434/api'
    extra_hosts:
      - host.docker.internal:host-gateway
    labels:
        - "traefik.enable=true"
        - "traefik.http.routers.ollama-webui-http.entrypoints=http"
        - "traefik.http.routers.ollama-webui-http.rule=Host(`ollama.ava.kb28.ch`,`ollama.ava.jcloud.ik-server.com`)"
        - "traefik.http.routers.ollama-webui-http.middlewares=ollama-webui-redirect"
        - "traefik.http.middlewares.ollama-webui-redirect.redirectscheme.scheme=https"
        - "traefik.http.routers.ollama-webui-https.entrypoints=https"
        - "traefik.http.routers.ollama-webui-https.rule=Host(`ollama.ava.kb28.ch`,`ollama.ava.jcloud.ik-server.com`)"
        - "traefik.http.routers.ollama-webui-https.tls.certResolver=letsencrypt"
        - "traefik.http.routers.ollama-webui-https.service=ollama-webui"
        - "traefik.http.routers.ollama-webui-https.middlewares=ollama-webui-auth"
        - "traefik.http.middlewares.ollama-webui-auth.basicauth.usersfile=/etc/traefik/authorized_users"