services:
  scrutiny:
    image: ghcr.io/starosdev/scrutiny:latest-omnibus@sha256:a79cd67878a797bc9412e9a9a3e330cd1062f78bd98dc28e2654e655196b8743
    container_name: scrutiny
    restart: unless-stopped
    privileged: true
    environment:
      - TZ=Europe/Berlin
      - HOST_OS=Unraid
      - HOST_HOSTNAME=Kallilabcore
      - COLLECTOR_CRON_SCHEDULE=0 0 * * *
      - COLLECTOR_RUN_STARTUP=false
      - SCRUTINY_WEB_MQTT_ENABLED=false
    volumes:
      - /mnt/user/appdata/scrutiny/config:/opt/scrutiny/config
      - /mnt/user/appdata/scrutiny/influxdb:/opt/scrutiny/influxdb
      - /run/udev:/run/udev:ro
      - /dev/sdb:/dev/sdb
      - /dev/sdc:/dev/sdc
      - /dev/nvme0n1:/dev/nvme0n1
    security_opt:
      - no-new-privileges:true
    networks:
      - frontend_net
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.scrutiny.rule=Host(`scrutiny.kaleschke.info`)"
      - "traefik.http.routers.scrutiny.entrypoints=websecure"
      - "traefik.http.routers.scrutiny.tls=true"
      - "traefik.http.routers.scrutiny.tls.certresolver=le"
      - "traefik.http.routers.scrutiny.middlewares=authelia@file,secure-headers@file"
      - "traefik.http.services.scrutiny.loadbalancer.server.port=8080"
     
networks:
  frontend_net:
    external: true