---
# TSYS Developer Support Stack - Docker Compose Template
# Version: 1.0
# Purpose: Demo deployment with dynamic configuration
# ⚠️ DEMO CONFIGURATION ONLY - NOT FOR PRODUCTION

networks:
  tsysdevstack-supportstack-demo-network:
    driver: bridge
    ipam:
      config:
        - subnet: 192.168.3.0/24
          gateway: 192.168.3.1

volumes:
  tsysdevstack-supportstack-demo_homepage_data:
    driver: local
  tsysdevstack-supportstack-demo_pihole_data:
    driver: local
  tsysdevstack-supportstack-demo_dockhand_data:
    driver: local

  tsysdevstack-supportstack-demo_influxdb_data:
    driver: local
  tsysdevstack-supportstack-demo_grafana_data:
    driver: local
  tsysdevstack-supportstack-demo_drawio_data:
    driver: local
  tsysdevstack-supportstack-demo_kroki_data:
    driver: local
  tsysdevstack-supportstack-demo_atomictracker_data:
    driver: local
  tsysdevstack-supportstack-demo_archivebox_data:
    driver: local
  tsysdevstack-supportstack-demo_tubearchivist_data:
    driver: local
  tsysdevstack-supportstack-demo_wakapi_data:
    driver: local
  tsysdevstack-supportstack-demo_mailhog_data:
    driver: local
  tsysdevstack-supportstack-demo_atuin_data:
    driver: local

services:
  # Docker Socket Proxy - Security Layer
  docker-socket-proxy:
    image: tecnativa/docker-socket-proxy:latest
    container_name: "tsysdevstack-supportstack-demo-docker-socket-proxy"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - CONTAINERS=1
      - IMAGES=1
      - NETWORKS=1
      - VOLUMES=1
      - EXEC=0
      - PRIVILEGED=0
      - SERVICES=0
      - TASKS=0
      - SECRETS=0
      - CONFIGS=0
      - PLUGINS=0
    labels:
      homepage.group: "Infrastructure"
      homepage.name: "Docker Socket Proxy"
      homepage.icon: "docker"
      homepage.href: "http://localhost:4005"
      homepage.description: "Secure proxy for Docker socket access"

  # Homepage - Central Dashboard
  homepage:
    image: ghcr.io/gethomepage/homepage:latest
    container_name: "tsysdevstack-supportstack-demo-homepage"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4000:3000"
    volumes:
      - tsysdevstack-supportstack-demo_homepage_data:/app/config
    environment:
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "Homepage"
      homepage.icon: "homepage"
      homepage.href: "http://localhost:4000"
      homepage.description: "Central dashboard for service discovery"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Pi-hole - DNS Management
  pihole:
    image: pihole/pihole:latest
    container_name: "tsysdevstack-supportstack-demo-pihole"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4006:80"
      - "53:53/tcp"
      - "53:53/udp"
    volumes:
      - tsysdevstack-supportstack-demo_pihole_data:/etc/pihole
    environment:
      - TZ=UTC
      - WEBPASSWORD=demo_password
      - WEBTHEME=default-darker
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Infrastructure"
      homepage.name: "Pi-hole"
      homepage.icon: "pihole"
      homepage.href: "http://localhost:4006"
      homepage.description: "DNS management with ad blocking"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost/admin"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Dockhand - Docker Management
  dockhand:
    image: fnsys/dockhand:latest
    container_name: "tsysdevstack-supportstack-demo-dockhand"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4007:3000"
    volumes:
      - tsysdevstack-supportstack-demo_dockhand_data:/app/data
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Infrastructure"
      homepage.name: "Dockhand"
      homepage.icon: "dockhand"
      homepage.href: "http://localhost:4007"
      homepage.description: "Modern Docker management UI"
    healthcheck:
      test: ["CMD", "curl", "-f", "--silent",
             "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3

  # InfluxDB - Time Series Database
  influxdb:
    image: influxdb:2.7-alpine
    container_name: "tsysdevstack-supportstack-demo-influxdb"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4008:8086"
    volumes:
      - tsysdevstack-supportstack-demo_influxdb_data:/var/lib/influxdb2
    environment:
      - DOCKER_INFLUXDB_INIT_MODE=setup
      - DOCKER_INFLUXDB_INIT_USERNAME=demo_admin
      - DOCKER_INFLUXDB_INIT_PASSWORD=demo_password
      - DOCKER_INFLUXDB_INIT_ORG=tsysdemo
      - DOCKER_INFLUXDB_INIT_BUCKET=demo_metrics
      - DOCKER_INFLUXDB_INIT_ADMIN_TOKEN=demo_token_replace_in_production
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Monitoring"
      homepage.name: "InfluxDB"
      homepage.icon: "influxdb"
      homepage.href: "http://localhost:4008"
      homepage.description: "Time series database for metrics"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:8086/ping"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Grafana - Visualization Platform
  grafana:
    image: grafana/grafana:latest
    container_name: "tsysdevstack-supportstack-demo-grafana"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4009:3000"
    volumes:
      - tsysdevstack-supportstack-demo_grafana_data:/var/lib/grafana
    environment:
      - GF_SECURITY_ADMIN_USER=admin
      - GF_SECURITY_ADMIN_PASSWORD=demo_password
      - GF_INSTALL_PLUGINS=grafana-clock-panel,grafana-simple-json-datasource
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Monitoring"
      homepage.name: "Grafana"
      homepage.icon: "grafana"
      homepage.href: "http://localhost:4009"
      homepage.description: "Analytics and visualization platform"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:3000/api/health"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Draw.io - Diagramming Server
  drawio:
    image: fjudith/draw.io:latest
    container_name: "tsysdevstack-supportstack-demo-drawio"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4010:8080"
    volumes:
      - tsysdevstack-supportstack-demo_drawio_data:/root
    environment:
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Documentation"
      homepage.name: "Draw.io"
      homepage.icon: "drawio"
      homepage.href: "http://localhost:4010"
      homepage.description: "Web-based diagramming application"
    healthcheck:
      test: ["CMD", "curl", "-f", "--silent",
             "http://localhost:8080"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Kroki - Diagrams as a Service
  kroki:
    image: yuzutech/kroki:latest
    container_name: "tsysdevstack-supportstack-demo-kroki"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4011:8000"
    volumes:
      - tsysdevstack-supportstack-demo_kroki_data:/data
    environment:
      - KROKI_SAFE_MODE=secure
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Documentation"
      homepage.name: "Kroki"
      homepage.icon: "kroki"
      homepage.href: "http://localhost:4011"
      homepage.description: "Diagrams as a service"
    healthcheck:
      test: ["CMD", "curl", "-f", "--silent",
             "http://localhost:8000/health"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Atomic Tracker - Habit Tracking
  atomictracker:
    image: ghcr.io/majorpeter/atomic-tracker:v1.3.1
    container_name: "tsysdevstack-supportstack-demo-atomictracker"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4012:8080"
    volumes:
      - tsysdevstack-supportstack-demo_atomictracker_data:/app/data
    environment:
      - NODE_ENV=production
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "Atomic Tracker"
      homepage.icon: "atomic-tracker"
      homepage.href: "http://localhost:4012"
      homepage.description: "Habit tracking and personal dashboard"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:8080"]
      interval: 30s
      timeout: 10s
      retries: 3

  # ArchiveBox - Web Archiving
  archivebox:
    image: archivebox/archivebox:latest
    container_name: "tsysdevstack-supportstack-demo-archivebox"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4013:8000"
    volumes:
      - tsysdevstack-supportstack-demo_archivebox_data:/data
    environment:
      - SECRET_KEY=demo_secret_replace_in_production
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "ArchiveBox"
      homepage.icon: "archivebox"
      homepage.href: "http://localhost:4013"
      homepage.description: "Web archiving solution"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:8000"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Tube Archivist - YouTube Archiving
  tubearchivist:
    image: bbilly1/tubearchivist:latest
    container_name: "tsysdevstack-supportstack-demo-tubearchivist"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4014:8000"
    volumes:
      - tsysdevstack-supportstack-demo_tubearchivist_data:/cache
    environment:
      - TA_HOST=tubearchivist
      - TA_PORT=4014
      - TA_DEBUG=false
      - TA_USERNAME=demo
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "Tube Archivist"
      homepage.icon: "tube-archivist"
      homepage.href: "http://localhost:4014"
      homepage.description: "YouTube video archiving"

  # Wakapi - Time Tracking
  wakapi:
    image: ghcr.io/muety/wakapi:latest
    container_name: "tsysdevstack-supportstack-demo-wakapi"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4015:3000"
    volumes:
      - tsysdevstack-supportstack-demo_wakapi_data:/data
    environment:
      - WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "Wakapi"
      homepage.icon: "wakapi"
      homepage.href: "http://localhost:4015"
      homepage.description: "Open-source WakaTime alternative"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3

  # MailHog - Email Testing
  mailhog:
    image: mailhog/mailhog:latest
    container_name: "tsysdevstack-supportstack-demo-mailhog"
    restart: unless-stopped
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4017:8025"
    volumes:
      - tsysdevstack-supportstack-demo_mailhog_data:/maildir
    environment:
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "MailHog"
      homepage.icon: "mailhog"
      homepage.href: "http://localhost:4017"
      homepage.description: "Web and API based SMTP testing"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider",
             "http://localhost:8025"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Atuin - Shell History
  atuin:
    image: ghcr.io/atuinsh/atuin:v18.10.0
    container_name: "tsysdevstack-supportstack-demo-atuin"
    restart: unless-stopped
    command: server start
    networks:
      - tsysdevstack-supportstack-demo-network
    ports:
      - "4018:8888"
    volumes:
      - tsysdevstack-supportstack-demo_atuin_data:/config
    environment:
      - ATUIN_DB_URI=sqlite:///config/atuin.db
      - PUID=1000
      - PGID=1000
    labels:
      homepage.group: "Developer Tools"
      homepage.name: "Atuin"
      homepage.icon: "atuin"
      homepage.href: "http://localhost:4018"
      homepage.description: "Magical shell history synchronization"