# Managed by Ansible - do not edit by hand.
version: "3.8"

networks:
  umami-net:
    driver: bridge

volumes:
  umami-db-data:

services:
  db:
    image: {{ umami_postgres_image }}
    restart: unless-stopped
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      TZ: ${TZ}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U \"$${POSTGRES_USER}\" -d \"$${POSTGRES_DB}\""]
      interval: 5s
      timeout: 5s
      retries: 10
    volumes:
      - umami-db-data:/var/lib/postgresql/data
    networks:
      - umami-net
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  umami:
    image: {{ umami_image }}
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    ports:
      - "{{ umami_bind_address }}:${UMAMI_PORT:-{{ umami_listen_port }}}:3000"
    environment:
      DATABASE_TYPE: postgresql
      DATABASE_URL: ${DATABASE_URL}
      APP_SECRET: ${APP_SECRET}
      HOSTNAME: "0.0.0.0"
      PORT: "3000"
      TZ: ${TZ}
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://localhost:3000/api/heartbeat || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 10
    networks:
      - umami-net
    security_opt:
      - no-new-privileges:true
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"