# Compose-bron van waarheid met paden voor een Unraid-installatie.
# Lees deployment/unraid/README.md vóór gebruik en wijzig secrets.
name: vacatureradar

x-app: &app
  image: ghcr.io/CHANGE_ME/vacatureradar:latest
  user: "10001:10001"
  read_only: true
  tmpfs:
    - /tmp:rw,noexec,nosuid,size=128m
    - /var/tmp:rw,noexec,nosuid,size=128m
    - /app/.cache:rw,noexec,nosuid,size=128m
  env_file:
    - /mnt/user/appdata/vacatureradar/config/.env
  restart: unless-stopped
  security_opt:
    - no-new-privileges:true
  volumes:
    - /mnt/user/appdata/vacatureradar/media:/app/media
    - /mnt/user/appdata/vacatureradar/logs:/app/logs
    - /mnt/user/appdata/vacatureradar/local:/app/local
  networks: [internal]
  depends_on:
    postgres: {condition: service_healthy}
    redis: {condition: service_healthy}

services:
  web:
    <<: *app
    ports: ["1226:8080"]
  worker:
    <<: *app
    environment:
      VACATURERADAR_RUN_MIGRATIONS: "0"
    cap_drop:
      - ALL
    command: ["celery", "-A", "config", "worker", "-l", "INFO", "-Q", "high,default,low", "--concurrency=2"]
  scheduler:
    <<: *app
    environment:
      VACATURERADAR_RUN_MIGRATIONS: "0"
    cap_drop:
      - ALL
    command: ["celery", "-A", "config", "beat", "-l", "INFO", "--schedule", "/tmp/celerybeat-schedule"]
  postgres:
    image: postgres:17.5-bookworm
    restart: unless-stopped
    env_file: [/mnt/user/appdata/vacatureradar/config/.env]
    volumes: [/mnt/user/appdata/vacatureradar/postgres:/var/lib/postgresql/data]
    networks: [internal]
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U vacatureradar -d vacatureradar"]
      interval: 10s
      timeout: 5s
      retries: 10
  redis:
    image: redis:7.4.2-alpine
    restart: unless-stopped
    command: ["redis-server", "--save", "60", "1", "--loglevel", "warning"]
    volumes: [/mnt/user/appdata/vacatureradar/redis:/data]
    networks: [internal]
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10
  ollama:
    image: ollama/ollama:0.9.6
    profiles: ["ai"]
    restart: unless-stopped
    volumes: [/mnt/user/appdata/vacatureradar/ollama:/root/.ollama]
    networks: [internal]

networks:
  internal:
    driver: bridge