services:
  postgresql17:
    image: postgres:17.9@sha256:5b96f1a16bd9768b060dd2ffe55cb6225c4d9ef4d214a8b21eb08134869a97e4
    container_name: postgresql17
    restart: unless-stopped

    environment:
      TZ: Europe/Berlin
      POSTGRES_USER: mailarchiver
      POSTGRES_DB: mailarchiver
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
      PGDATA: /var/lib/postgresql/data

    volumes:
      - /mnt/user/appdata/postgresql17:/var/lib/postgresql/data
      - /mnt/user/appdata/secrets/postgres_password.txt:/run/secrets/postgres_password:ro

    networks:
      - backend_net

    security_opt:
      - no-new-privileges:true

networks:
  backend_net:
    external: true