services:
  diun:
    image: crazymax/diun:4.31.0
    command: serve
    user: 2023:2023 # diun:diun
    group_add:
      - 131 # docker
    restart: unless-stopped
    volumes:
      - data:/data:rw
      - /var/run/docker.sock:/var/run/docker.sock:rw
    secrets:
      - ntfy_token
    environment:
      TZ: "Etc/UTC"
      DIUN_WATCH_WORKERS: "20"
      DIUN_WATCH_SCHEDULE: "0 */6 * * *"
      DIUN_WATCH_JITTER: "30s"
      DIUN_WATCH_FIRSTCHECKNOTIF: "true"
      DIUN_PROVIDERS_DOCKER: "true"
      DIUN_NOTIF_NTFY_ENDPOINT: "https://ntfy.leaf.home.kappeh.org"
      DIUN_NOTIF_NTFY_TOKENFILE: "/run/secrets/ntfy_token"
      DIUN_NOTIF_NTFY_TOPIC: "diun"
      DIUN_NOTIF_NTFY_PRIORITY: "3"
    labels:
      diun.enable: "true"
      diun.watch_repo: "true"
      diun.include_tags: "latest"

  init:
    image: busybox:1.37.0
    user: root:root
    command: /init.sh
    restart: no
    network_mode: none
    volumes:
      - ./init.sh:/init.sh:ro
      # Used for resolving user and group names within the init script
      - /etc/passwd:/etc/passwd:ro
      - /etc/group:/etc/group:ro
      # Mount all named volumes so they can be initialised
      - data:/data:rw
 
volumes:
  data:

secrets:
  ntfy_token:
    environment: "NTFY_TOKEN"