services:
  uptime-kuma:
    image: louislam/uptime-kuma:2
    security_opt:
      - apparmor=unconfined
    environment:
      - UPTIME_KUMA_BASE_PATH=/monitor
    volumes:
      - kuma_data:/app/data
    ports:
      - "3002:3001"
    restart: unless-stopped

  updater:
    build: ./updater
    security_opt:
      - apparmor=unconfined
    environment:
      - WEBHOOK_SECRET=${WEBHOOK_SECRET}
      - SSH_KEY_PATH=/root/.ssh/id_ed25519
    volumes:
      - /root/.ssh:/root/.ssh:ro
    ports:
      - "9000:9000"
    restart: unless-stopped

  backup:
    image: postgres:16-alpine
    security_opt:
      - apparmor=unconfined
    entrypoint: ["/bin/sh", "-c", "crond -f -l 8"]
    environment:
      - BACKUP_DATABASES=${BACKUP_DATABASES}
      - PG_SUPERPASS=${PG_SUPERPASS}
      - BACKUP_REMOTE=${BACKUP_REMOTE}
      - KUMA_PUSH_URL=${KUMA_PUSH_URL}
    volumes:
      - backup_data:/backups
      - ./backup/backup.sh:/etc/periodic/daily/backup:ro
      - /root/.ssh:/root/.ssh:ro
    restart: unless-stopped

volumes:
  kuma_data:
  backup_data: