services:
  redis:
    image: redis:8.8.0-alpine@sha256:09160599abd229764c0fb44cb6be640294e1d360a54b19985ab4843dcf2d90f1
    container_name: Redis
    restart: unless-stopped
    command:
      - sh
      - -c
      - exec redis-server --appendonly yes --requirepass "$$(cat /run/secrets/redis_password)"

    volumes:
      - /mnt/user/appdata/redis:/data
      - /mnt/user/appdata/secrets/redis_password.txt:/run/secrets/redis_password:ro

    networks:
      - backend_net

    security_opt:
      - no-new-privileges:true

    healthcheck:
      test: ["CMD-SHELL", "redis-cli -a \"$$(cat /run/secrets/redis_password)\" --no-auth-warning ping | grep -q PONG"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 15s

networks:
  backend_net:
    external: true