---
volumes:
  grafana-data:
    driver: local
  prometheus-data:
    driver: local
networks:
  default:
    external:
      name: grafana-prometheus      
services:
  grafana:
    image: docker.io/grafana/grafana-oss:10.4.2
    container_name: grafana
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=admin
      # - GF_SERVER_DOMAIN=%(protocol)s://%(domain)s:%(http_port)s/
      # - GF_SERVER_ROOT_URL=%(protocol)s://%(domain)s/
      - GF_SERVER_DOMAIN=grafana.phx-erp.de
      # - GF_SERVER_PROTOCOL=https
      # - GF_SERVER_HTTP_PORT=3000
      - GF_LOG_LEVEL=debug
      - GF_SMTP_ENABLED=true
      - GF_SMTP_FROM_ADDRESS=admin@phx-erp.de
      - GF_SMTP_FROM_NAME=Grafana
      - GF_SMTP_HOST=mail.phx-erp.de:465
      - GF_SMTP_PASSWORD=0rB0@et68
      - GF_SMTP_USER=yuri.lima@phx-erp.de
      - GF_SMTP_STARTTLS_POLICY=false
      - GF_SMTP_SKIP_VERIFY=true
      - GF_SMTP_ENABLE_TRACING=false
    ports:
      - "3000:3000"
    volumes:
      - grafana-data:/var/lib/grafana
    restart: unless-stopped
    networks:
      - default
  prometheus:
    image: docker.io/prom/prometheus:v2.51.2
    container_name: prometheus
    ports:
      - 9090:9090
    command: "
              --config.file=/etc/prometheus/prometheus.yaml \
              --web.config.file=/etc/prometheus/web-config.yaml \
              --web.external-url=https://prometheus.phx-erp.de
              "
    volumes:
      # - '--web.enable-lifecycle' # Enable reload of configuration automatically without restart !!!
      - ./config/prometheus.yaml:/etc/prometheus/prometheus.yaml:ro # RO Read-only
      - ./config/web-config.yaml:/etc/prometheus/web-config.yaml:ro # RO Read-only
      - ./https_portal/data/prometheus.phx-erp.de/production:/etc/prometheus/certs
      - prometheus-data:/prometheus
    restart: unless-stopped
    networks:
      - default
  node_exporter:
    image: quay.io/prometheus/node-exporter:latest
    container_name: node_exporter
    network_mode: host
    pid: host
    restart: unless-stopped
    command:
      - "--path.procfs=/host/proc"
      - "--path.sysfs=/host/sys"
      - "--path.rootfs=/host"
      - "--collector.filesystem.ignored-mount-points=^/(sys|proc|dev)($$|/)"
    volumes:
      - "/proc:/host/proc:ro"
      - "/sys:/host/sys:ro"
      - "/:/host:ro,rslave"
  https_portal:
    container_name: https_portal
    image: "steveltn/https-portal:1.21"
    restart: unless-stopped
    user: "root"
    networks:
      - default
    ports:
      - "80:80"
      - "443:443"
    environment:
      STAGE: "production" # Use Let's Encrypt production server
      WEBSOCKET: "true" # Enable websocket support
      DEBUG: "true"
      RENEW_MARGIN_DAYS: 30
      CLIENT_MAX_BODY_SIZE: 0
      # FORCE_RENEW: 'true'
      DOMAINS: 'grafana.phx-erp.de -> 5.75.153.161:3000, prometheus.phx-erp.de -> 5.75.153.161:9090'
    volumes:
      - ./https_portal/data:/var/lib/https-portal # ssl_certs, vhost.d, htdocs
      - ./https_portal/log:/var/log/nginx # nginx logs