services:
  node-red:
    profiles: ["monitoring","all","node-red"]
#    image: nodered/node-red:latest
    build:
      context: ${PROJECT_ROOT}/monitoring/node-red
    container_name: node-red
    restart: unless-stopped
    depends_on:
      - docker-socket-proxy
    environment:
      DOCKER_HOST: ${DOCKER_SOCKET_PROXY_HOST}
      TZ: ${TZ}
      PROJECT_ROOT: ${NODE_COMPOSE_ROOT}
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
#    ports:
#      - "1880:1880"
    volumes:
      - ${PROJECT_ROOT}/monitoring/node-red/data:/data
      - ${PROJECT_ROOT}:/compose/docker:ro
      - /home/nixos/raspi:/compose/raspi:ro
#      - ${PROJECT_ROOT}:/usr/src/node-red:ro

#      - ${PROJECT_ROOT}/default-environment.env:/usr/src/node-red/default-environment.env:ro
#      - ${PROJECT_ROOT}/default-network.yml:/usr/src/node-red/default-network.yml:ro
#      - ${PROJECT_ROOT}/core/docker-compose.yml:/usr/src/node-red/core/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/prometheus/docker-compose.yml:/usr/src/node-red/monitoring/prometheus/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/gotify/docker-compose.yml:/usr/src/node-red/monitoring/gotify/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/grafana/docker-compose.yml:/usr/src/node-red/monitoring/grafana/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/portainer/docker-compose.yml:/usr/src/node-red/monitoring/portainer/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/uptime-kuma/docker-compose.yml:/usr/src/node-red/monitoring/uptime-kuma/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/gitea/docker-compose.yml:/usr/src/node-red/apps/gitea/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/gramps/docker-compose.yml:/usr/src/node-red/apps/gramps/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/nextcloud/docker-compose.yml:/usr/src/node-red/apps/nextcloud/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/passbolt/docker-compose.yml:/usr/src/node-red/apps/passbolt/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/searxng/docker-compose.yml:/usr/src/node-red/apps/searxng/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/shift-recorder/docker-compose.yml:/usr/src/node-red/apps/shift-recorder/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/apps/stockfill/docker-compose.yml:/usr/src/node-red/apps/stockfill/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/monitoring/node-red/docker-compose.yml:/usr/src/node-red/monitoring/node-red/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/core/test/docker-compose.yml:/usr/src/node-red/core/test/docker-compose.yml:ro
#      - ${PROJECT_ROOT}/secrets/stack-secrets.env:/usr/src/node-red/secrets/stack-secrets.env:ro

#      - /run/current-system/sw/bin/docker:/usr/bin/docker:ro
#    depends_on:
#      - mosquitto
#      - influxdb
    networks:
      - monitor
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.node-red.rule=Host(`node-red.lan.ddnsgeek.com`)"
#      - "traefik.http.routers.node-red.service=api@internal"
      - "traefik.http.routers.node-red.entrypoints=websecure"
      - "traefik.http.routers.node-red.tls.certresolver=myresolver"
      - "traefik.http.routers.node-red.tls.options=mtls-private-admin@file"
      - "traefik.http.routers.node-red.middlewares=authelia"
      - "io.portainer.accesscontrol.public"
      - "traefik.docker.network=core_traefik"
      - "traefik.http.services.node-red.loadbalancer.server.port=1880"