version: "3.7"

services:
        
###########################################################################
###########################################################################
##
##    Docker Compose File: Stats Services
##    Function: Run Stats Services
##
###########################################################################
###########################################################################

  grafana:
    image: grafana/grafana:latest
    container_name: grafana
    hostname: grafana
    user: "472"
    working_dir: /usr/share/grafana
    runtime: runc
    restart: unless-stopped
    volumes:
      - /home/albus/grafana:/var/lib/grafana
    ports:
      - 3000:3000
    environment:
      - GF_SERVER_DOMAIN=$(GF_SERVER_DOMAIN:?err)
      - GF_SERVER_ROOT_URL=$(GF_SERVER_ROOT_URL:?err)
      - GF_SECURITY_ADMIN_USER=$(GF_SECURITY_ADMIN_USER:?err)
      - GF_SECURITY_ADMIN_PASSWORD=$(GF_SECURITY_ADMIN_PASSWORD:?err)
      - GF_INSTALL_PLUGINS=$(GF_INSTALL_PLUGINS:?err)
    labels:
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy
    depends_on:
      influxdb:
        condition: service_healthy
        restart: true
      caddy:
        condition: service_healthy
        restart: true
      
  influxdb:
    image: influxdb:1.8
    container_name: influxdb
    hostname: influxdb
    restart: unless-stopped
    runtime: runc
    command: influxd
    volumes:
      - /home/albus/influxdb/data:/var/lib/influxdb
      - /home/albus/influxdb/config:/etc/influxdb
    ports:
      - 8086:8086
    environment:
      - INFLUXDB_RETENTION_ENABLED=true
      - INFLUXDB_SHARD_PRECREATION_ENABLED=true
      - INFLUX_USERNAME=$(INFLUX_USERNAME:?err)
      - INFLUX_PASSWORD=$(INFLUX_PASSWORD:?err)
      - INFLUXDB_DATA_INDEX_VERSION=tsi1
      - INFLUXDB_RETENTION_CHECK_INTERVAL=30m
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy

  varken:
    image: boerderij/varken:develop
    container_name: varken
    hostname: varken
    working_dir: /app
    restart: unless-stopped
    runtime: runc
    command: /bin/sh -c 'cp /app/data/varken.example.ini /config/varken.example.ini && python3 /app/Varken.py'
    volumes:
      - /home/albus/varken:/config
    environment:
      - TZ=America/New_York
      - GPG_KEY=$(GPG_KEY:?err)
      - PYTHON_VERSION=3.9.1
      - PYTHON_PIP_VERSION=20.3.3
      - PYTHON_GET_PIP_URL=https://github.com/pypa/get-pip/raw/5f38681f7f5872e4032860b54e9cc11cf0374932/get-pip.py
      - PYTHON_GET_PIP_SHA256=6a0b13826862f33c13b614a921d36253bfa1ae779c5fbf569876f3585057e9d2
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy
    depends_on:
      influxdb:
        condition: service_healthy
        restart: true
      grafana:
        condition: service_healthy
        restart: true