services:
  postgresql17:
    image: postgres:17.10@sha256:0027bef26712baaee437a4ea48fdf3d2d2e2bc5f0d81615374408ca320f3c7e3
    container_name: postgresql17
    restart: unless-stopped

    environment:
      TZ: Europe/Berlin
      POSTGRES_USER: mailarchiver
      POSTGRES_DB: mailarchiver
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
      PGDATA: /var/lib/postgresql/data

    volumes:
      - /mnt/user/appdata/postgresql17:/var/lib/postgresql/data
      - /mnt/user/appdata/secrets/postgres_password.txt:/run/secrets/postgres_password:ro

    networks:
      - backend_net

    security_opt:
      - no-new-privileges:true

    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U mailarchiver -d mailarchiver"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 30s

networks:
  backend_net:
    external: true