[Unit]
Description=Authelia
After=docker.service
StartLimitIntervalSec=0

[Service]
Slice=servarr.slice
Restart=always
RestartSec=5s
ExecStartPre=/bin/sh -c '/usr/bin/docker network create entertainment || true'
ExecStartPre=/usr/bin/docker pull authelia/authelia:latest
ExecStart=/usr/bin/docker run --name=authelia \
  --rm \
  --hostname authelia \
  --net=entertainment \
  --interactive \
  -v /mnt/docker/data/authelia:/config \
  -l traefik.enable=true \
  -l traefik.docker.network=entertainment \
  -l traefik.http.routers.authelia.rule="Host(`AUTH_DUCKDNS_DOMAIN`)" \
  -l traefik.http.routers.authelia.entryPoints='https' \
  -l traefik.http.routers.authelia.tls=true \
  -l traefik.http.middlewares.authelia.forwardAuth.address="http://authelia:9091/api/authz/forward-auth?rd=https://AUTH_DUCKDNS_DOMAIN/" \
  -l traefik.http.middlewares.authelia.forwardAuth.trustForwardHeader=true \
  -l traefik.http.middlewares.authelia.forwardAuth.authResponseHeaders='Remote-User,Remote-Groups,Remote-Email,Remote-Name' \
  authelia/authelia:latest
ExecStop=/usr/bin/docker stop traefik
ExecStop=/usr/bin/docker rm -f traefik
TimeoutSec=300
Environment=DOCKER_CONFIG=/etc/docker
Environment=HOSTNAME=spark

[Install]
WantedBy=multi-user.target