services:
  glances:
    image: nicolargo/glances:latest-full@sha256:60872a1af0e40a3150975617c7e811ad7ad48f95bc45d033fb0c1737a037e4d2
    container_name: glances
    restart: unless-stopped
    pid: host
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp
    environment:
      - TZ=Europe/Berlin
      - GLANCES_OPT=-w
      - PYTHONPYCACHEPREFIX=/tmp/py_caches
    volumes:
      - /:/rootfs:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /etc/os-release:/etc/os-release:ro
    networks:
      - frontend_net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:61208/api/4/status"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.glances.rule=Host(`glances.kaleschke.info`)
      - traefik.http.routers.glances.entrypoints=websecure
      - traefik.http.routers.glances.tls=true
      - traefik.http.routers.glances.tls.certresolver=le
      - traefik.http.routers.glances.middlewares=authelia@file,secure-headers@file
      - traefik.http.services.glances.loadbalancer.server.port=61208

networks:
  frontend_net:
    external: true