services:
  uptime-kuma:
    image: louislam/uptime-kuma:2
    security_opt:
      - apparmor=unconfined

    volumes:
      - kuma_data:/app/data
    ports:
      - "3002:3001"
    restart: unless-stopped

  updater:
    build: ./updater
    security_opt:
      - apparmor=unconfined
    environment:
      - WEBHOOK_SECRET=${WEBHOOK_SECRET}
      - SSH_KEY_PATH=${SSH_KEY_PATH:-/root/.ssh/hotel-manage_deploy}
      - FORGEJO_URL=${FORGEJO_URL:-https://git.pterois.co.uk}
      - FORGEJO_ORG=${FORGEJO_ORG:-hotel-manage-stack}
      - FORGEJO_TOKEN=${FORGEJO_TOKEN:-}
      - AUTH_URL=${AUTH_URL:-http://10.10.10.101:3001}
      - CENTRAL_AUTH_SECRET=${CENTRAL_AUTH_SECRET}
    volumes:
      - /root/.ssh:/root/.ssh:ro
    ports:
      - "9000:9000"
    restart: unless-stopped

  backup:
    image: postgres:16-alpine
    security_opt:
      - apparmor=unconfined
    entrypoint: ["/bin/sh", "-c", "crond -f -l 8"]
    environment:
      - BACKUP_DATABASES=${BACKUP_DATABASES}
      - PG_SUPERPASS=${PG_SUPERPASS}
      - BACKUP_REMOTE=${BACKUP_REMOTE}
      - KUMA_PUSH_URL=${KUMA_PUSH_URL}
    volumes:
      - backup_data:/backups
      - ./backup/backup.sh:/etc/periodic/daily/backup:ro
      - /root/.ssh:/root/.ssh:ro
    restart: unless-stopped

volumes:
  kuma_data:
  backup_data: