# Lumen on its own, for people who already run SeerrNG (any install method, any machine).
# Your SeerrNG and its settings are not touched.
#
#   Lumen     http://<this-machine>:5080   what everyone uses: discover, request, track requests
#
# Save this as compose.yaml in a new, empty folder, edit SEERR_INTERNAL_URL and SEERR_BROWSER_URL below, then:
# Start:   docker compose up -d
# Update:  docker compose pull && docker compose up -d
#
# Step-by-step guide: docs/using-seerr/lumen.md in the SeerrNG repository.
# Then in SeerrNG: Settings -> Network -> turn on "Trust Reverse Proxy", save, restart SeerrNG.

services:
  lumen:
    image: ghcr.io/snapetech-org/seerrng-lumen:latest
    # Pin v3.72.23 for a fixed release. Optional local build instead of the image:
    # build: https://github.com/snapetech-org/seerrng.git#main:lumen
    # image: seerrng-lumen:local
    container_name: lumen
    environment:
      # How Lumen reaches your SeerrNG. Use the machine's LAN IP and SeerrNG's port, e.g.
      # http://192.168.1.50:5055. (SeerrNG installed directly on this machine with Docker Desktop:
      # http://host.docker.internal:5055)
      SEERR_INTERNAL_URL: http://192.168.1.50:5055
      # The address people use to open full SeerrNG in their browser. Lumen sends them here for
      # pages it doesn't have (settings, users, issues).
      SEERR_BROWSER_URL: http://192.168.1.50:5055
      # (Set up before these names? SEERR_URL and SEERR_FULL_URL still work.)
      # Only if a reverse proxy or tunnel sits in front of Lumen: its address or subnet.
      # See "Put Lumen behind your reverse proxy or tunnel" in the guide. Leave empty otherwise.
      LUMEN_TRUSTED_PROXIES: ''
      LUMEN_REAL_IP_HEADER: X-Forwarded-For
    ports:
      - 5080:80
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    # Optional admin defaults for every user (You > Lumen settings for everyone).
    # To save them from that page, create a folder Lumen may write to:
    #   mkdir lumen-data && sudo chown 101:101 lumen-data
    # then remove the # from "volumes:" and the lumen-data line below.
    # Or write lumen-config.json yourself (see lumen/public/lumen-config.example.json),
    # create it first, and uncomment the lumen-config.json line instead.
    # volumes:
    #   - ./lumen-data:/lumen-data
    #   - ./lumen-config.json:/usr/share/nginx/html/lumen-config.json:ro
    #   - ./branding:/usr/share/nginx/html/branding:ro  # optional logo / tab icon
    restart: unless-stopped