services:
  telegraf:
    image: telegraf
    container_name: telegraf
    restart: unless-stopped
    privileged: true
    user: telegraf:985 # make telegraf run with docker group (985) to access docker socket
    hostname: ${HOSTNAME} # picks up the hostname of komodo-periphery
    volumes:
      - ${PWD}/telegraf.conf:/etc/telegraf/telegraf.conf:ro
      # Add host fs
      - /:/hostfs:ro
      # Add host net specifically
      - /proc/net:/hostfs/proc/net
      # Add host docker
      - /var/run/docker.sock:/var/run/docker.sock:z
    environment:
      - HOST_MOUNT_PREFIX=/hostfs
      - HOST_PROC=/hostfs/proc

  certbot:
    image: git.mrmeeb.stream/mrmeeb/certbot-cron:latest
    container_name: certbot
    restart: unless-stopped
    ports:
      - 80:80
    volumes:
      - ${DROOT}/certbot:/config
      - ${HOME}/.step/certs/root_ca.crt:/config/custom_ca/mrmeeb.pem
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=Europe/London
      - APPRISE_URL=${CERTBOT_DISCORD_WEBHOOK}
      - NOTIFY_ON_FAILURE=true
      - EMAIL=admin@mrmeeb.stream
      - CERT_COUNT=1
      - DOMAINS=${HOSTNAME_FULL},${HOSTNAME}
      - PLUGIN=standalone
      - CUSTOM_CA=mrmeeb.pem
      - CUSTOM_CA_SERVER=https://ca.internal/acme/acme/directory