version: "3.7"

services:
        
###########################################################################
###########################################################################
##
##    Docker Compose File: Stats Services
##    Function: Run Stats Services
##
###########################################################################
###########################################################################

  grafana:
    image: grafana/grafana:latest
    container_name: grafana
    hostname: grafana
    user: "472"
    working_dir: /usr/share/grafana
    runtime: runc
    restart: unless-stopped
    volumes:
      - /home/albus/grafana:/var/lib/grafana
    ports:
      - 3000:3000
    environment:
      - GF_SERVER_DOMAIN=stats.floonetwork.site
      - GF_SERVER_ROOT_URL=https://stats.floonetwork.site
      - GF_SECURITY_ADMIN_USER=morphon
      - GF_SECURITY_ADMIN_PASSWORD=freemind596
      - GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-worldmap-panel,satellogic-3d-globe-panel,corpglory-progresslist-panel,grafana-piechart-panel
    labels:
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy
    depends_on:
      influxdb:
        condition: service_healthy
        restart: true
      caddy:
        condition: service_healthy
        restart: true
      
  influxdb:
    image: influxdb:1.8
    container_name: influxdb
    hostname: influxdb
    restart: unless-stopped
    runtime: runc
    command: influxd
    volumes:
      - /home/albus/influxdb/data:/var/lib/influxdb
      - /home/albus/influxdb/config:/etc/influxdb
    ports:
      - 8086:8086
    environment:
      - INFLUXDB_RETENTION_ENABLED=true
      - INFLUXDB_SHARD_PRECREATION_ENABLED=true
      - INFLUX_USERNAME=morphon
      - INFLUX_PASSWORD=freemind596
      - INFLUXDB_DATA_INDEX_VERSION=tsi1
      - INFLUXDB_RETENTION_CHECK_INTERVAL=30m
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy

  varken:
    image: boerderij/varken:develop
    container_name: varken
    hostname: varken
    working_dir: /app
    restart: unless-stopped
    runtime: runc
    command: /bin/sh -c 'cp /app/data/varken.example.ini /config/varken.example.ini && python3 /app/Varken.py'
    volumes:
      - /home/albus/varken:/config
    environment:
      - TZ=America/New_York
      - GPG_KEY=E3FF2839C048B25C084DEBE9B26995E310250568
      - PYTHON_VERSION=3.9.1
      - PYTHON_PIP_VERSION=20.3.3
      - PYTHON_GET_PIP_URL=https://github.com/pypa/get-pip/raw/5f38681f7f5872e4032860b54e9cc11cf0374932/get-pip.py
      - PYTHON_GET_PIP_SHA256=6a0b13826862f33c13b614a921d36253bfa1ae779c5fbf569876f3585057e9d2
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy
    depends_on:
      influxdb:
        condition: service_healthy
        restart: true
      grafana:
        condition: service_healthy
        restart: true