add plex

services/plex/.env.example

@@ -0,0 +1,11 @@
+# Generated by knecht from Portainer env vars
+PUID=
+PGID=
+TZ=
+TV_PATH=
+MOVIES_PATH=
+
+# Claim token for first-time setup: https://plex.tv/claim
+# Only needed until the server is claimed; tokens expire after 4 minutes.
+# Can be emptied again afterwards.
+PLEX_CLAIM=

services/plex/docker-compose.yml

@@ -0,0 +1,41 @@
+services:
+  plex:
+    image: lscr.io/linuxserver/plex:latest
+    container_name: plex
+    restart: unless-stopped
+    environment:
+      - PUID=${PUID}
+      - PGID=${PGID}
+      - TZ=${TZ}
+      - VERSION=docker
+      - PLEX_CLAIM=${PLEX_CLAIM}
+    volumes:
+      - plex_config:/config
+      - ${TV_PATH}:/media/tv:ro
+      - ${MOVIES_PATH}:/media/movies:ro
+    tmpfs:
+      - /transcode:size=4g
+    ports:
+      # Plex clients (Apple TV, mobile) don't use the Traefik domain — they connect
+      # directly to the addresses Plex advertises. These must be reachable on the LAN.
+      - "32400:32400"       # main web UI + client connections
+      - "8324:8324"         # Plex Companion
+      - "32469:32469"       # DLNA
+      - "32410:32410/udp"   # GDM local discovery
+      - "32412:32412/udp"
+      - "32413:32413/udp"
+      - "32414:32414/udp"
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.plex.rule=Host(`plex.home.jens.pub`)"
+      - "traefik.http.routers.plex.entrypoints=websecure"
+      - "traefik.http.services.plex.loadbalancer.server.port=32400"
+
+volumes:
+  plex_config:
+
+networks:
+  proxy:
+    external: true