revised approach

paperless/compose.yml

@@ -0,0 +1,58 @@
+services:
+  broker:
+    image: docker.io/library/redis:8
+    restart: unless-stopped
+    volumes:
+      - redisdata:/data
+    networks:
+      - default
+  db:
+    image: docker.io/library/postgres:17
+    restart: unless-stopped
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    environment:
+      POSTGRES_DB: paperless
+      POSTGRES_USER: paperless
+      POSTGRES_PASSWORD: paperless
+    networks:
+      - default
+  service:
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.paperless.entrypoints=websecure
+      - traefik.http.routers.paperless.rule=Host(`paperless.rskio.com`)
+      - traefik.http.routers.paperless.middlewares=secureHeaders@file
+      - traefik.http.routers.paperless.tls=true
+      - traefik.http.routers.paperless.tls.options=internal@file
+      - traefik.http.routers.paperless.service=paperless@docker
+      - traefik.http.services.paperless.loadbalancer.server.port=8000
+      - traefik.http.routers.paperless.tls.certresolver=rskio_certresolver
+    image: ghcr.io/paperless-ngx/paperless-ngx:latest
+    restart: unless-stopped
+    depends_on:
+      - db
+      - broker
+    volumes:
+      - data:/usr/src/paperless/data
+      - media:/usr/src/paperless/media
+      - ./export:/usr/src/paperless/export
+      - ./consume:/usr/src/paperless/consume
+    env_file: compose.env
+    environment:
+      PAPERLESS_REDIS: redis://broker:6379
+      PAPERLESS_DBHOST: db
+    networks:
+      - default
+      - traefik
+
+volumes:
+  data:
+  media:
+  pgdata:
+  redisdata:
+
+networks:
+  traefik:
+    external: true
+  default: {}