services:
  loki:
    image: grafana/loki:3.7.2@sha256:191d4fdfb7264f16989f0a57f320872620a5a7c2ceeec6229212c4190ec49b86
    container_name: loki
    restart: unless-stopped
    command:
      - -config.file=/etc/loki/loki-config.yml
    volumes:
      - /mnt/user/appdata/loki/config:/etc/loki:ro
      - /mnt/user/appdata/loki/data:/loki
    networks:
      - backend_net
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:3100/ready"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 40s

  alloy:
    image: grafana/alloy:v1.16.1@sha256:51aeb9d829239345070619dad3edd6873186f913c84f45b365b74574fcb38ec0
    container_name: alloy
    restart: unless-stopped
    command:
      - run
      - /etc/alloy/config.alloy
      - --storage.path=/var/lib/alloy/data
    volumes:
      - /mnt/user/appdata/alloy/config:/etc/alloy:ro
      - /mnt/user/appdata/alloy/data:/var/lib/alloy/data
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - backend_net
    security_opt:
      - no-new-privileges:true
    depends_on:
      - loki

networks:
  backend_net:
    external: true