---
configs:
  komga-config:
    content: |
      spring:
        security:
            oauth2:
                client:
                    registration:
                        authentik:
                            provider: authentik
                            client-id: 4CsVDypjllNpB6oaqBh8JNVtRt5kFIzIQcjtJFCo
                            client-secret: nknziTm88F8AM6qW5NTelvtRYKG50pw8dACUXgz6fa3apDA6ATkxjbABgEdfHZWs97PFwRyVTr55bcApRqwrtmDefJMlJk1oYeOxhH6DA2oyiDXfXjfR2zVjZLMArnIC
                            client-name: authentik
                            scope: openid,email,profile
                            authorization-grant-type: authorization_code
                            redirect-uri: "{baseUrl}/{action}/oauth2/code/{registrationId}"
                    provider:
                        authentik:
                            user-name-attribute: sub
                            issuer-uri: https://authentik.kucharczyk.xyz/application/o/komga/
services:
  komga:
    image: gotson/komga:1.20.0
    container_name: komga
    depends_on:
      - authentik-server
    networks:
      public:
        ipv4_address: 192.168.240.34
    ports:
      - "25600:25600"
    labels:
      caddy: comic.${DOMAIN}
      caddy.reverse_proxy: "{{ upstreams 25600 }}"
    volumes:
      - "${DOCKER_STORAGE_PATH}/komga:/config"
      - "${COMIC_PATH}:/data"
      - "${TORRENTS_SEED_PATH}:/import"
    configs:
      - source: komga-config
        target: /config/application.yml
    restart: unless-stopped