services:
  postgresql17:
    image: postgres:17.9@sha256:2a0d0fe14825b0939f78a8cad5cd4e6aa68bf94d0e5dd96e24b6d23af4315545
    container_name: postgresql17
    restart: unless-stopped

    environment:
      TZ: Europe/Berlin
      POSTGRES_USER: mailarchiver
      POSTGRES_DB: mailarchiver
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_password
      PGDATA: /var/lib/postgresql/data

    volumes:
      - /mnt/user/appdata/postgresql17:/var/lib/postgresql/data
      - /mnt/user/appdata/secrets/postgres_password.txt:/run/secrets/postgres_password:ro

    networks:
      - backend_net

    security_opt:
      - no-new-privileges:true

    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U mailarchiver -d mailarchiver"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 30s

networks:
  backend_net:
    external: true