services:
  firesight:
    image: ghcr.io/tjindarr/unifi-insights-hub:latest
    container_name: firesight
    restart: unless-stopped
    # Host network preserves the syslog source IP (recommended on Unraid).
    # If you'd rather use bridge mode, comment out network_mode and uncomment
    # the ports block below.
    network_mode: host
    # ports:
    #   - "8095:8095/tcp"
    #   - "514:514/udp"
    environment:
      # Set this to match your router's timezone so syslog timestamps
      # (which UniFi sends without a TZ) display correctly.
      - TZ=Europe/Stockholm
    volumes:
      # Holds the SQLite DB AND config.json (UniFi credentials, retention,
      # auto-generated session secret). Survives image updates.
      - /mnt/user/appdata/firesight:/data
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:8095/api/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

# First-run flow:
#   1. docker compose up -d
#   2. Open http://<unraid-ip>:8095, log in as admin / admin, set a new password
#   3. In Settings, fill in UniFi host, read-only user, password, site
#   4. On the UDR: Settings → System → Remote Syslog → <unraid-ip>:514 (UDP)