docker-compose.yml

services:
  freshrss:
    image: lscr.io/linuxserver/freshrss:1.24.1
    container_name: freshrss
    environment:
      - PGID=${PGID}
      - PUID=${PUID}
      - TZ=${TZ}
    volumes:
      - ./volumes/freshrss:/config
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  rss-bridge:
    image: rssbridge/rss-bridge:sha-c0e37bc
    container_name: rss-bridge
    volumes:
      - ./volumes/rss-bridge:/config
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  instagram-feed-generator:
    build: 
      context: ./projects/instagram-feed-generator
    container_name: instagram-feed-generator
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  rss-nginx:
    image: nginx:stable-alpine3.20
    container_name: rss-nginx
    volumes:
      - ./nginx/rss.conf:/etc/nginx/nginx.conf:ro
    ports:
      - 8000:80
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  vaultwarden:
    image: vaultwarden/server:1.31.0
    container_name: vaultwarden
    environment:
      - INVITATIONS_ALLOWED=true
      - PGID=${PGID}
      - PUID=${PUID}
      - SIGNUPS_ALLOWED=false # Activate this with "true", create an account and then set it back to "false"
      - TZ=${TZ}
      - WEBSOCKET_ENABLED=true
    volumes:
      - ./volumes/vaultwarden:/data
    ports:
      - "8100:80"
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  uptime-kuma:
    image: louislam/uptime-kuma:1
    container_name: uptime-kuma
    environment:
      - PGID=${PGID}
      - PUID=${PUID}
      - TZ=${TZ}
    ports:
      - 9100:3001
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./volumes/uptime-kuma:/app/data
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  dockerproxy:
    image: ghcr.io/tecnativa/docker-socket-proxy:0.2.0
    container_name: dockerproxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - CONTAINERS=1
      - POST=0
    restart: unless-stopped
    healthcheck:
      test: wget --spider http://localhost:2375/version || exit 1
      interval: "29s"
      timeout: "5s"
      retries: 3
      start_period: "21s"
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  cloudflared:
    image: cloudflare/cloudflared:2024.6.1
    container_name: cloudflared
    command: tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN}
    restart: unless-stopped
    deploy:
      resources:
        limits:
          cpus: 0.50
          memory: 128M
        reservations:
          cpus: 0.25
          memory: 64M

  # TODO: implement backup service
  # backups:
  #   build:
  #     context: .
  #     dockerfile: backups.dockerfile
  #     args:
  #       - MEGA_SESSION=${MEGA_SESSION}
  #   container_name: backups
  #   environment:
  #     - PGID=${PGID}
  #     - PUID=${PUID}
  #     - TZ=${TZ}
  #   volumes:
  #     - ./backups:/backups
  #     - ./volumes:/volumes
  #     - ./backups-encryption.key:/backups-encryption.key
  #   restart: unless-stopped
  #   deploy:
  #     resources:
  #       limits:
  #         cpus: 0.50
  #         memory: 128M
  #       reservations:
  #         cpus: 0.25
  #         memory: 64M