---
version: "2.1"
services:
  unifi-network-application:
    image: lscr.io/linuxserver/unifi-network-application:latest
    container_name: unifi-network-application
    environment:
      PUID: 1000
      PGID: 1000
      TZ: Etc/UTC
      MONGO_USER: unifiuser
      MONGO_PASS: {{ lookup('keepass', 'unifi-mongodb-pass', 'password') }}
      MONGO_HOST: unifi-db
      MONGO_PORT: 27017
      MONGO_DBNAME: unifidb
      MEM_LIMIT: 1024 #optional
      MEM_STARTUP: 1024 #optional
    volumes:
      - unifi-data:/config
    ports:
      - 8443:8443
      - 3478:3478/udp
      - 10001:10001/udp
      - 8080:8080
      - 1900:1900/udp #optional
      - 8843:8843 #optional
      - 8880:8880 #optional
      - 6789:6789 #optional
      - 5514:5514/udp #optional
    restart: always
    labels:
      com.centurylinklabs.watchtower.enable: false
      com.centurylinklabs.watchtower.monitor-only: true
      com.centurylinklabs.watchtower.depends-on: unifi-db
    networks:
      - mail-relay
      - unifi-internal

  unifi-db:
    # Starte Container OHNE init-script
    # IN Container
    # 1. mongo
    # 2. db.getSiblingDB("unifidb").createUser({user: "unifiuser", pwd: "GEHEIM", roles: [{role: "dbOwner", db: "unifidb"}, {role: "dbOwner", db: "unifidb_stat"}]});
    # https://discourse.linuxserver.io/t/cant-connect-to-mongodb-for-unifi-network-application/8166
    image: docker.io/mongo:4
    container_name: unifi-db
    volumes:
      - db-data:/data/db
    restart: always
    labels:
      com.centurylinklabs.watchtower.enable: true
    networks:
      - unifi-internal

######## Volumes ########
volumes:
  db-data:
  unifi-data:
######## Networks ########
networks:
  mail-relay:
    external: true
  unifi-internal:
    driver: bridge