# SeerrNG with Lumen in front of it.
#
#   Lumen     http://<this-machine>:5080   what everyone uses: discover, request, track requests
#   SeerrNG   http://<this-machine>:5055   full SeerrNG, for setup and admin settings
#
# Start:   docker compose up -d
# Update:  docker compose pull && docker compose up -d
#
# Step-by-step guide: docs/using-seerr/lumen.md in the SeerrNG repository.
# Already running SeerrNG? Use compose.lumen-only.yaml instead; it installs Lumen alone.

services:
  seerrng:
    image: ghcr.io/snapetech-org/seerrng:latest
    container_name: seerrng
    environment:
      LOG_LEVEL: info
      PORT: 5055
      TZ: Etc/UTC # your time zone, e.g. America/New_York or Europe/London
    ports:
      # Full SeerrNG for admins. Keep it on your home network; don't forward it to the internet.
      - 5055:5055
    volumes:
      # SeerrNG's settings and database. The folder must be writable by user 1000:1000.
      - ./seerrng-config:/app/config
    restart: unless-stopped

  lumen:
    image: ghcr.io/snapetech-org/seerrng-lumen:latest
    # Pin v3.72.23 for a fixed release. Optional local build instead of the image:
    # build: https://github.com/snapetech-org/seerrng.git#main:lumen
    # image: seerrng-lumen:local
    container_name: lumen
    depends_on:
      - seerrng
    environment:
      # How Lumen reaches SeerrNG. The service name works because both are in this file.
      SEERR_INTERNAL_URL: http://seerrng:5055
      # The address people use to open full SeerrNG in their browser. Lumen sends them here for
      # pages it doesn't have (settings, users, issues). Change localhost to this machine's
      # address or hostname, e.g. http://192.168.1.50:5055 or https://seerr.example.com
      SEERR_BROWSER_URL: http://localhost:5055
      # (Set up before these names? SEERR_URL and SEERR_FULL_URL still work.)
      # Only if a reverse proxy or tunnel sits in front of Lumen: its address or subnet.
      # See "Put Lumen behind your reverse proxy or tunnel" in the guide. Leave empty otherwise.
      LUMEN_TRUSTED_PROXIES: ''
      LUMEN_REAL_IP_HEADER: X-Forwarded-For
    ports:
      - 5080:80
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    # Optional admin defaults for every user (You > Lumen settings for everyone).
    # To save them from that page, create a folder Lumen may write to:
    #   mkdir lumen-data && sudo chown 101:101 lumen-data
    # then remove the # from "volumes:" and the lumen-data line below.
    # Or write lumen-config.json yourself (see lumen/public/lumen-config.example.json),
    # create it first, and uncomment the lumen-config.json line instead.
    # volumes:
    #   - ./lumen-data:/lumen-data
    #   - ./lumen-config.json:/usr/share/nginx/html/lumen-config.json:ro
    #   - ./branding:/usr/share/nginx/html/branding:ro  # optional logo / tab icon
    restart: unless-stopped