deploy: consolidate Unraid stack in Dockerman

docker-compose.unraid.yml

@@ -1,76 +1,38 @@
-# Compose-bron van waarheid met paden voor een Unraid-installatie.
-# Lees deployment/unraid/README.md vóór gebruik en wijzig secrets.
+# Eén Dockerman-container met intern bewaakte PostgreSQL-, Redis-, web- en Celery-processen.
 name: vacatureradar
 
-x-app: &app
-  image: ghcr.io/CHANGE_ME/vacatureradar:latest
-  user: "10001:10001"
-  read_only: true
-  tmpfs:
-    - /tmp:rw,noexec,nosuid,size=128m
-    - /var/tmp:rw,noexec,nosuid,size=128m
-    - /app/.cache:rw,noexec,nosuid,size=128m
-  env_file:
-    - /mnt/user/appdata/vacatureradar/config/.env
-  restart: unless-stopped
-  security_opt:
-    - no-new-privileges:true
-  volumes:
-    - /mnt/user/appdata/vacatureradar/media:/app/media
-    - /mnt/user/appdata/vacatureradar/logs:/app/logs
-    - /mnt/user/appdata/vacatureradar/local:/app/local
-  networks: [internal]
-  depends_on:
-    postgres: {condition: service_healthy}
-    redis: {condition: service_healthy}
-
 services:
-  web:
-    <<: *app
-    ports: ["1226:8080"]
-  worker:
-    <<: *app
+  app:
+    build:
+      context: .
+      dockerfile: Dockerfile.unraid
+    image: vacatureradar:unraid
+    container_name: VacatureRadar
+    env_file:
+      - /mnt/user/appdata/vacatureradar/source/.env
     environment:
-      VACATURERADAR_RUN_MIGRATIONS: "0"
-    cap_drop:
-      - ALL
-    command: ["celery", "-A", "config", "worker", "-l", "INFO", "-Q", "high,default,low", "--concurrency=2"]
-  scheduler:
-    <<: *app
-    environment:
-      VACATURERADAR_RUN_MIGRATIONS: "0"
-    cap_drop:
-      - ALL
-    command: ["celery", "-A", "config", "beat", "-l", "INFO", "--schedule", "/tmp/celerybeat-schedule"]
-  postgres:
-    image: postgres:17.5-bookworm
+      DATABASE_URL: postgresql://vacatureradar:${POSTGRES_PASSWORD}@127.0.0.1:5432/vacatureradar
+      POSTGRES_HOST: 127.0.0.1
+      REDIS_URL: redis://127.0.0.1:6379/0
+      VACATURERADAR_RESTORE_DUMP: /app/local/backups/aio-migration.dump
     restart: unless-stopped
-    env_file: [/mnt/user/appdata/vacatureradar/config/.env]
-    volumes: [/mnt/user/appdata/vacatureradar/postgres:/var/lib/postgresql/data]
-    networks: [internal]
+    security_opt:
+      - no-new-privileges:true
+    ports:
+      - "1226:8080"
+    volumes:
+      - /mnt/user/appdata/vacatureradar/source/local/media:/app/media
+      - /mnt/user/appdata/vacatureradar/source/local/logs:/app/logs
+      - /mnt/user/appdata/vacatureradar/source/local:/app/local
+    labels:
+      net.unraid.docker.managed: dockerman
+      net.unraid.docker.webui: http://[IP]:[PORT:8080]/
+      net.unraid.docker.icon: http://[IP]:[PORT:8080]/static/favicon.svg
+      org.opencontainers.image.title: VacatureRadar
+      org.opencontainers.image.description: Persoonlijke vacature-intelligence voor de Belgische arbeidsmarkt
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U vacatureradar -d vacatureradar"]
-      interval: 10s
+      test: ["CMD", "python", "scripts/healthcheck.py", "http://127.0.0.1:8080/health/ready/"]
+      interval: 30s
       timeout: 5s
-      retries: 10
-  redis:
-    image: redis:7.4.2-alpine
-    restart: unless-stopped
-    command: ["redis-server", "--save", "60", "1", "--loglevel", "warning"]
-    volumes: [/mnt/user/appdata/vacatureradar/redis:/data]
-    networks: [internal]
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 10s
-      timeout: 5s
-      retries: 10
-  ollama:
-    image: ollama/ollama:0.9.6
-    profiles: ["ai"]
-    restart: unless-stopped
-    volumes: [/mnt/user/appdata/vacatureradar/ollama:/root/.ollama]
-    networks: [internal]
-
-networks:
-  internal:
-    driver: bridge
+      retries: 5
+      start_period: 60s