version: "3.7"

services:
        
###########################################################################
###########################################################################
##
##    Docker Compose File: Mealie Services
##    Function: Run Mealie Services
##
###########################################################################
###########################################################################

  mealie:
    container_name: mealie
    hostname: mealie
    image: hkotel/mealie:latest
    working_dir: /
    restart: unless-stopped
    runtime: runc
    volumes:
      - $(APPDATA:?err)/mealie/data:/app/data
    expose:
      - "9000"
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    environment:
      - PUID=$(PUID:?err)
      - PGID=$(PGUID:?err)
      - TZ=$(TIMEZONE:?err)
      - DEFAULT_EMAIL=$(DEFAULT_EMAIL:?err)
      - BASE_URL=$(BASE_URL:?err)
    depends_on:
      caddy:
        condition: service_healthy
        restart: true
    networks:
      - proxy