services:
  postgresql17:
    image: postgres:17
    container_name: postgresql17
    restart: unless-stopped

    environment:
      TZ: Europe/Berlin
      POSTGRES_USER: mailarchiver
      POSTGRES_DB: mailarchiver
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
      PGDATA: /var/lib/postgresql/data

    volumes:
      - /mnt/user/appdata/postgresql17:/var/lib/postgresql/data
      - /mnt/user/appdata/secrets/postgres_password.txt:/run/secrets/postgres_password:ro

    networks:
      - backend_net

    security_opt:
      - no-new-privileges:true

networks:
  backend_net:
    external: true