services:
  # --- THE VAULT ---
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      - SIGNUPS_ALLOWED=false
      - PUSH_ENABLED=false
    volumes:
      - ./data:/data
    networks:
      - pass-net

  # --- VW METRICS EXPORTER (Tricked-dev) ---
  vwmetrics:
    image: ghcr.io/tricked-dev/vwmetrics:latest
    container_name: vwmetrics
    restart: always
    environment:
      # Use read-only mode for the sqlite database
      - DATABASE_URL=sqlite:///data/db.sqlite3?mode=ro
      - PORT=3040
      - UPDATE_SECONDS=60
    volumes:
      - ./data:/data:ro # Mount the same data folder as read-only
    ports:
      - "3040:3040"
    networks:
      - pass-net

  # --- KOMODO AGENT ---
  komodo-periphery:
    image: ghcr.io/moghtech/komodo-periphery:2
    container_name: komodo-periphery
    restart: always
    environment:
      PERIPHERY_CORE_ADDRESS: 100.80.179.128:9120
      PERIPHERY_CONNECT_AS: Mystic-Passwords
      PERIPHERY_ONBOARDING_KEY: O_dPWwdaJNO7q87kgvPE4hnjaLlcsu_O
      PERIPHERY_SERVER_ENABLED: "true"
    ports:
      - "8120:8120"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./komodo:/config
      - /proc:/proc:ro
    networks:
      - pass-net

  # --- MONITORING ---
  node-exporter:
    image: prom/node-exporter:latest
    container_name: node-exporter
    restart: always
    ports:
      - "9100:9100"
    networks:
      - pass-net

  cadvisor:
    image: gcr.io/cadvisor/cadvisor:latest
    container_name: cadvisor
    restart: always
    ports:
      - "8080:8080"
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:ro
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
    networks:
      - pass-net

networks:
  pass-net:
    driver: bridge