name: lumaops

services:
  lumaops:
    image: lumaops:0.1.0
    build:
      context: .
      dockerfile: Dockerfile
      args:
        LUMAOPS_VERSION: 0.1.0
    container_name: lumaops
    labels:
      net.unraid.docker.managed: "dockerman"
      net.unraid.docker.webui: "http://[IP]:[PORT:1223]/"
      net.unraid.docker.icon: "https://gitlab.com/CalcProgrammer1/OpenRGB/-/raw/release_candidate_1.0rc3/qt/org.openrgb.OpenRGB.png"
    restart: unless-stopped
    init: false
    ports:
      - "${WEB_PORT:-1223}:${APP_PORT:-8080}/tcp"
    environment:
      APP_HOST: "${APP_HOST:-0.0.0.0}"
      APP_PORT: "${APP_PORT:-8080}"
      LOG_LEVEL: "${LOG_LEVEL:-INFO}"
      TZ: "${TZ:-Europe/Brussels}"
      LUMAOPS_ENV: production
      OPENRGB_HOST: "127.0.0.1"
      OPENRGB_PORT: "${OPENRGB_PORT:-6742}"
      OPENRGB_CONFIG_DIR: /config/openrgb
      HOME: /config/openrgb
      XDG_CONFIG_HOME: /config/openrgb
      DATABASE_URL: sqlite:////data/lumaops.db
      CONFIG_DIR: /config/lumaops
      DATA_DIR: /data
      LOGS_DIR: /logs
      ENABLE_NETWORK_DISCOVERY: "${ENABLE_NETWORK_DISCOVERY:-true}"
      ENABLE_HOME_ASSISTANT: "${ENABLE_HOME_ASSISTANT:-false}"
      ENABLE_WLED: "${ENABLE_WLED:-false}"
      AUTH_ENABLED: "${AUTH_ENABLED:-true}"
      EXTERNAL_ACCESS: "${EXTERNAL_ACCESS:-false}"
      LUMAOPS_ADMIN_TOKEN: "${LUMAOPS_ADMIN_TOKEN:?set a random token of at least 32 characters}"
      SECURE_COOKIES: "${SECURE_COOKIES:-false}"
      CORS_ORIGINS: "${CORS_ORIGINS:-}"
      TRUSTED_PROXIES: "${TRUSTED_PROXIES:-}"
      PUID: "${PUID:-99}"
      PGID: "${PGID:-100}"
    volumes:
      - ./appdata/openrgb:/config/openrgb
      - ./appdata/lumaops:/config/lumaops
      - ./data:/data
      - ./logs:/logs
    devices:
      - /dev/bus/usb:/dev/bus/usb
      - /dev/hidraw0:/dev/hidraw0
      - /dev/i2c-0:/dev/i2c-0
      # Add only the required adapters after inventory, for example:
      # - /dev/ttyUSB0:/dev/ttyUSB0
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    read_only: true
    tmpfs:
      - /tmp:size=128m,mode=1777
      - /run:size=16m,mode=0755
    healthcheck:
      test: ["CMD", "/opt/venv/bin/python", "/opt/lumaops/healthcheck.py"]
      interval: 30s
      timeout: 8s
      start_period: 90s
      retries: 3