multimedia-oauth.yml

version: "3.3"

#
# This file enables SSO via Google Cloud OAUTH.  Additionally, it layers in rate limiting.
#
services:
  plex:
    labels:
      - traefik.http.routers.plex.middlewares=chain-oauth@docker
  sabnzbd:
    labels:
      # Bypass authentication for api calls with our specific api key
      - traefik.http.routers.sabnzbd-bypass.entrypoints=https
      - traefik.http.routers.sabnzbd-bypass.rule=Host(`radarr.${DOMAIN}`) && (Headers(`X-Api-Key`, `${SABNZBD_API_KEY}`) || Query(`apikey`, `${SABNZBD_API_KEY}`))
      - traefik.http.routers.sabnzbd-bypass.middlewares=chain-no-auth@file
      - traefik.http.routers.sabnzbd-bypass.priority=100
      - traefik.http.routers.sabnzbd-bypass.service=sabnzbd

      # Authenticated
      - traefik.http.routers.sabnzbd.middlewares=chain-oauth@docker
      - traefik.http.routers.sabnzbd.priority=99
  sonarr:
    labels:
      - traefik.http.routers.sonarr.middlewares=chain-oauth@docker
  radarr:
    labels:
      - traefik.http.routers.radarr.middlewares=chain-oauth@docker    
  prowlarr:
    labels:
      - traefik.http.routers.prowlarr.middlewares=chain-oauth@docker
  organizr:
    labels:
      - traefik.http.routers.organizr.middlewares=chain-oauth@docker