name: "docker.compose"
version: "1.0.0"
description: "Valknar's Stacks"
author: "valknar@pivoine.art"
license: "private"

envs:
  default:
    # Common
    ADMIN_EMAIL: valknar@pivoine.art
    NETWORK_NAME: falcon_network
    TIMEZONE: Europe/Berlin
    EMAIL_FROM: hi@pivoine.art
    # Core
    CORE_COMPOSE_PROJECT_NAME: core
    CORE_DB_HOST: postgres
    CORE_DB_PORT: 5432
    CORE_REDIS_HOST: redis
    CORE_REDIS_PORT: 6379
    CORE_REDIS_IMAGE: redis:7-alpine
    CORE_POSTGRES_IMAGE: postgres:16-alpine
    # VPN
    VPN_TRAEFIK_ENABLED: true
    VPN_COMPOSE_PROJECT_NAME: vpn
    VPN_DOCKER_IMAGE: ghcr.io/wg-easy/wg-easy:latest
    VPN_TRAEFIK_HOST: vpn.pivoine.art
    # Track
    TRACK_TRAEFIK_ENABLED: true
    TRACK_COMPOSE_PROJECT_NAME: track
    TRACK_DOCKER_IMAGE: ghcr.io/umami-software/umami:postgresql-latest
    TRACK_TRAEFIK_HOST: umami.pivoine.art
    TRACK_DB_NAME: umami
    # Sexy
    SEXY_TRAEFIK_ENABLED: true
    SEXY_COMPOSE_PROJECT_NAME: sexy
    SEXY_TRAEFIK_HOST: sexy.pivoine.art
    SEXY_DIRECTUS_IMAGE: directus/directus:11.12.0
    SEXY_FRONTEND_IMAGE: ghcr.io/valknarxxx/sexy:latest
    SEXY_DB_NAME: directus
    SEXY_PUBLIC_URL: https://sexy.pivoine.art/api
    SEXY_CORS_ORIGIN: https://sexy.pivoine.art
    SEXY_SESSION_COOKIE_DOMAIN: sexy.pivoine.art
    SEXY_CONTENT_SECURITY_POLICY_DIRECTIVES__FRAME_SRC: https://sexy.pivoine.art
    SEXY_USER_REGISTER_URL_ALLOW_LIST: https://sexy.pivoine.art/signup/verify
    SEXY_PASSWORD_RESET_URL_ALLOW_LIST: https://sexy.pivoine.art/password/reset
    SEXY_FRONTEND_PUBLIC_API_URL: https://sexy.pivoine.art/api
    SEXY_FRONTEND_PUBLIC_URL: https://sexy.pivoine.art
    # Mattermost
    MATTERMOST_TRAEFIK_ENABLED: true
    MATTERMOST_COMPOSE_PROJECT_NAME: mattermost
    MATTERMOST_IMAGE: mattermost/mattermost-team-edition:latest
    MATTERMOST_TRAEFIK_HOST: mattermost.pivoine.art
    MATTERMOST_DB_NAME: mattermost
    # Tandoor
    TANDOOR_TRAEFIK_ENABLED: true
    TANDOOR_COMPOSE_PROJECT_NAME: tandoor
    TANDOOR_IMAGE: vabene1111/recipes:latest
    TANDOOR_TRAEFIK_HOST: tandoor.pivoine.art
    TANDOOR_DB_NAME: tandoor
    TANDOOR_ENABLE_SIGNUP: 0
    TANDOOR_REVERSE_PROXY_AUTH: 0
    TANDOOR_EMAIL_USE_TLS: 0
    TANDOOR_EMAIL_USE_SSL: 1
    TANDOOR_GUNICORN_MEDIA: 0
    TANDOOR_COMMENT_PREF_DEFAULT: 1
    TANDOOR_SHOPPING_MIN_AUTOSYNC_INTERVAL: 5
    # Scrapy
    SCRAPY_TRAEFIK_ENABLED: true
    SCRAPY_COMPOSE_PROJECT_NAME: scrapy
    SCRAPY_SCRAPYD_IMAGE: vimagick/scrapyd
    SCRAPY_IMAGE: vimagick/scrapyd
    SCRAPY_SCRAPYRT_IMAGE: vimagick/scrapyd
    SCRAPY_UI_IMAGE: ghcr.io/valknarness/scrapy-ui:main
    SCRAPY_TRAEFIK_HOST: scrapy.pivoine.art
    SCRAPY_SCRAPYD_PORT: 6800
    SCRAPY_SCRAPYRT_PORT: 9080
    SCRAPY_UI_SCRAPYD_URL: https://scrapy.pivoine.art/scrapyd
    # n8n
    N8N_TRAEFIK_ENABLED: true
    N8N_COMPOSE_PROJECT_NAME: n8n
    N8N_IMAGE: docker.n8n.io/n8nio/n8n
    N8N_TRAEFIK_HOST: n8n.pivoine.art
    N8N_PORT: 5678
    N8N_DB_NAME: n8n
    N8N_DB_SCHEMA: public
    # Filestash
    STASH_TRAEFIK_ENABLED: true
    STASH_COMPOSE_PROJECT_NAME: stash
    STASH_IMAGE: machines/filestash:latest
    STASH_TRAEFIK_HOST: stash.pivoine.art
    STASH_PORT: 8334
    STASH_CANARY: true
    # Linkwarden
    LINKS_TRAEFIK_ENABLED: true
    LINKS_COMPOSE_PROJECT_NAME: links
    LINKS_DOCKER_IMAGE: ghcr.io/linkwarden/linkwarden:latest
    LINKS_TRAEFIK_HOST: links.pivoine.art
    LINKS_DB_NAME: linkwarden
    LINKS_MEILI_IMAGE: getmeili/meilisearch:v1.12.8
    LINKS_MEILI_NO_ANALYTICS: true
    # Restic
    RESTIC_TRAEFIK_ENABLED: true
    RESTIC_COMPOSE_PROJECT_NAME: restic
    RESTIC_IMAGE: garethgeorge/backrest:latest
    RESTIC_TRAEFIK_HOST: restic.pivoine.art
    RESTIC_HOSTNAME: falcon
    RESTIC_BACKUP_PATH: /mnt/hidrive/users/valknar/Backup
    # Vault
    VAULT_TRAEFIK_ENABLED: true
    VAULT_COMPOSE_PROJECT_NAME: vault
    VAULT_IMAGE: vaultwarden/server:latest
    VAULT_TRAEFIK_HOST: vault.pivoine.art
    VAULT_WEBSOCKET_ENABLED: true
    VAULT_SIGNUPS_ALLOWED: true
    VAULT_INVITATIONS_ALLOWED: true
    VAULT_SHOW_PASSWORD_HINT: false
    # Joplin
    JOPLIN_TRAEFIK_ENABLED: true
    JOPLIN_COMPOSE_PROJECT_NAME: joplin
    JOPLIN_IMAGE: joplin/server:latest
    JOPLIN_TRAEFIK_HOST: joplin.pivoine.art
    JOPLIN_APP_PORT: 22300
    JOPLIN_DB_NAME: joplin
    # Kit (combines Vert and Paint with landing page)
    KIT_TRAEFIK_ENABLED: true
    KIT_COMPOSE_PROJECT_NAME: kit
    KIT_TRAEFIK_HOST: kit.pivoine.art
    KIT_LANDING_IMAGE: ghcr.io/valknarness/kit-ui:latest
    KIT_VERT_IMAGE: ghcr.io/vert-sh/vert:latest
    KIT_VERT_TRAEFIK_HOST: vert.kit.pivoine.art
    KIT_PASTEL_API_IMAGE: ghcr.io/valknarness/pastel-api:latest
    KIT_PASTEL_UI_IMAGE: ghcr.io/valknarness/pastel-ui:latest
    KIT_PASTEL_TRAEFIK_HOST: pastel.kit.pivoine.art
    KIT_STIRLING_IMAGE: frooodle/s-pdf:latest
    KIT_STIRLING_TRAEFIK_HOST: stirling.kit.pivoine.art
    KIT_UNITS_IMAGE: ghcr.io/valknarness/units-ui:latest
    KIT_UNITS_TRAEFIK_HOST: units.kit.pivoine.art
    KIT_DRAW_IMAGE: excalidraw/excalidraw:latest
    KIT_DRAW_TRAEFIK_HOST: draw.kit.pivoine.art
    KIT_FIGLET_IMAGE: ghcr.io/valknarness/figlet-ui:latest
    KIT_FIGLET_TRAEFIK_HOST: figlet.kit.pivoine.art
    # Jellyfin
    JELLY_TRAEFIK_ENABLED: true
    JELLY_COMPOSE_PROJECT_NAME: jelly
    JELLY_TRAEFIK_HOST: jelly.pivoine.art
    # Media Stack (Jellyfin, Filestash, Koel)
    MEDIA_TRAEFIK_ENABLED: true
    MEDIA_COMPOSE_PROJECT_NAME: media
    MEDIA_JELLYFIN_IMAGE: jellyfin/jellyfin:latest
    MEDIA_JELLYFIN_TRAEFIK_HOST: jellyfin.media.pivoine.art
    MEDIA_FILESTASH_IMAGE: machines/filestash:latest
    MEDIA_FILESTASH_TRAEFIK_HOST: filestash.media.pivoine.art
    MEDIA_FILESTASH_CANARY: true
    # Dev (Gitea + Coolify)
    DEV_TRAEFIK_ENABLED: true
    DEV_COMPOSE_PROJECT_NAME: dev
    DEV_GITEA_IMAGE: gitea/gitea:latest
    DEV_GITEA_TRAEFIK_HOST: dev.pivoine.art
    DEV_GITEA_DB_NAME: gitea
    DEV_GITEA_RUNNER_IMAGE: gitea/act_runner:latest
    DEV_GITEA_RUNNER_NAME: docker-runner
    DEV_COOLIFY_IMAGE: ghcr.io/coollabsio/coolify:latest
    DEV_COOLIFY_TRAEFIK_HOST: coolify.dev.pivoine.art
    DEV_COOLIFY_DB_NAME: coolify
    # PairDrop
    DROP_TRAEFIK_ENABLED: true
    DROP_COMPOSE_PROJECT_NAME: drop
    DROP_TRAEFIK_HOST: drop.pivoine.art
    # Netdata
    NETDATA_TRAEFIK_ENABLED: true
    NETDATA_COMPOSE_PROJECT_NAME: netdata
    NETDATA_IMAGE: netdata/netdata:latest
    NETDATA_TRAEFIK_HOST: netdata.pivoine.art
    NETDATA_HOSTNAME: netdata.pivoine.art
    # Proxy
    PROXY_COMPOSE_PROJECT_NAME: proxy
    PROXY_DOCKER_IMAGE: traefik:latest
    PROXY_TRAEFIK_HOST: proxy.pivoine.art
    # Sablier
    SABLIER_COMPOSE_PROJECT_NAME: sablier
    SABLIER_VERSION: latest
    # AI Stack
    AI_TRAEFIK_ENABLED: true
    AI_COMPOSE_PROJECT_NAME: ai
    AI_POSTGRES_IMAGE: pgvector/pgvector:pg16
    AI_WEBUI_IMAGE: ghcr.io/open-webui/open-webui:main
    AI_CRAWL4AI_IMAGE: unclecode/crawl4ai:latest
    AI_FACEFUSION_IMAGE: facefusion/facefusion:3.5.0-cpu
    AI_FACEFUSION_TRAEFIK_ENABLED: true
    AI_FACEFUSION_TRAEFIK_HOST: facefusion.ai.pivoine.art
    AI_FACEFUSION_EXECUTION_PROVIDERS: cpu
    AI_TRAEFIK_HOST: ai.pivoine.art
    AI_DB_USER: ai
    AI_DB_NAME: openwebui
    AI_WEBUI_NAME: Pivoine AI
    AI_ENABLE_SIGNUP: true
    AI_ENABLE_RAG_WEB_SEARCH: true
    AI_ENABLE_RAG_SSL_VERIFY: true
    AI_RAG_EMBEDDING_ENGINE: openai
    AI_RAG_EMBEDDING_MODEL: text-embedding-3-small
    AI_VECTOR_DB: pgvector
    AI_CRAWL4AI_PORT: 11235
    AI_OPENAI_API_BASE_URLS: https://api.anthropic.com/v1
    AI_LITELLM_TRAEFIK_HOST: llm.ai.pivoine.art
    # Asciinema
    ASCIINEMA_TRAEFIK_ENABLED: true
    ASCIINEMA_COMPOSE_PROJECT_NAME: asciinema
    ASCIINEMA_IMAGE: ghcr.io/asciinema/asciinema-server:latest
    ASCIINEMA_TRAEFIK_HOST: asciinema.pivoine.art
    ASCIINEMA_DB_NAME: asciinema
    ASCIINEMA_SIGN_UP_DISABLED: true
    ASCIINEMA_UNCLAIMED_TTL: 30
    ASCIINEMA_MAIL_REPLY_TO: valknar@pivoine.art
    # Watchtower
    WATCHTOWER_POLL_INTERVAL: 300
    WATCHTOWER_LABEL_ENABLE: true
    WATCHTOWER_CLEANUP: true
    WATCHTOWER_INCLUDE_STOPPED: false
    WATCHTOWER_INCLUDE_RESTARTING: true
    WATCHTOWER_RUN_ONCE: false
    WATCHTOWER_LOG_LEVEL: info
    WATCHTOWER_ROLLING_RESTART: false
    WATCHTOWER_NOTIFICATIONS: shoutrrr

scripts:
  config: docker compose config
  up: docker compose up -d
  down: docker compose down
  logs: docker compose logs -f
  restart: docker compose restart
  ps: docker compose ps
  pull: docker compose pull
  run: docker compose exec -it
  env/sync: rsync -avzhe ssh ./.env root@vps:~/Projects/docker-compose/
  # Database export scripts for sexy.pivoine.art
  # Export PostgreSQL database schema and data with DROP IF EXISTS statements
  sexy/db/export: |
    docker exec core_postgres pg_dump \
      -U sexy \
      -d sexy \
      --no-owner \
      --no-acl \
      --clean \
      --if-exists \
      > ~/Projects/docker-compose/sexy/directus.sql &&
    echo "Database exported to ~/Projects/docker-compose/sexy/directus.sql"

  # Export Directus schema.yaml (collections, fields, relations, etc.)
  sexy/schema/export: |
    docker exec sexy_api mkdir -p /directus/snapshots &&
    docker exec sexy_api npx directus schema snapshot /directus/snapshots/schema.yaml &&
    docker cp sexy_api:/directus/snapshots/schema.yaml ~/Projects/docker-compose/sexy/schema.yaml &&
    echo "Directus schema exported to ~/Projects/docker-compose/sexy/schema.yaml"

  # Combined export: both database and schema
  sexy/export/all: |
    echo "Exporting database..." &&
    docker exec core_postgres pg_dump \
      -U sexy \
      -d sexy \
      --no-owner \
      --no-acl \
      --clean \
      --if-exists \
      > ~/Projects/docker-compose/sexy/directus.sql &&
    echo "✓ Database exported" &&
    echo "Exporting Directus schema..." &&
    docker exec sexy_api mkdir -p /directus/snapshots &&
    docker exec sexy_api npx directus schema snapshot /directus/snapshots/schema.yaml &&
    docker cp sexy_api:/directus/snapshots/schema.yaml ~/Projects/docker-compose/sexy/schema.yaml &&
    echo "✓ Directus schema exported" &&
    echo "All exports completed successfully!"

  # Import PostgreSQL database from SQL dump
  # WARNING: This will DROP existing tables if they exist (uses --clean --if-exists)
  sexy/db/import: |
    echo "⚠️  WARNING: This will replace the current database!" &&
    echo "Make sure core_postgres container is running..." &&
    docker exec -i core_postgres psql -U valknar -d directus < ~/Projects/docker-compose/sexy/directus.sql &&
    echo "✓ Database imported from ~/Projects/docker-compose/sexy/directus.sql" &&
    echo "Restarting Directus API..." &&
    docker restart sexy_api &&
    echo "✓ Import completed successfully!"

  # Apply Directus schema snapshot (collections, fields, relations)
  # This uses 'directus schema apply' which is non-destructive by default
  sexy/schema/import: |
    echo "Applying Directus schema snapshot..." &&
    docker cp ~/Projects/docker-compose/sexy/schema.yaml sexy_api:/directus/schema.yaml &&
    docker exec sexy_api npx directus schema apply --yes /directus/schema.yaml &&
    echo "✓ Directus schema applied from ~/Projects/docker-compose/sexy/schema.yaml" &&
    echo "Restarting Directus API..." &&
    docker restart sexy_api &&
    echo "✓ Schema import completed successfully!"

  # Combined import: database and schema (use with caution!)
  # Step 1: Import database (drops/recreates all tables)
  # Step 2: Apply schema (updates Directus metadata)
  sexy/import/all: |
    echo "⚠️  WARNING: This will completely replace the database and schema!" &&
    echo "Importing database..." &&
    docker exec -i core_postgres psql -U ${DB_USER} -d ${SEXY_DB_NAME} < ~/Projects/docker-compose/sexy/directus.sql &&
    echo "✓ Database imported" &&
    echo "Applying Directus schema..." &&
    docker cp ~/Projects/docker-compose/sexy/schema.yaml sexy_api:/directus/schema.yaml &&
    docker exec sexy_api npx directus schema apply --yes /directus/schema.yaml &&
    echo "✓ Schema applied" &&
    echo "Restarting Directus API..." &&
    docker restart sexy_api &&
    echo "✓✓✓ Complete import finished successfully!"

  sexy/uploads/export: |
    rm -rf sexy/uploads &&
    docker cp sexy_api:/directus/uploads sexy/uploads
  sexy/uploads/import: |
    docker cp sexy/uploads sexy_api:/directus
  # Update Directus extension bundle from latest sexy_frontend image
  sexy/bundle/update: |
    docker run --rm -v core_directus_bundle:/target ${SEXY_FRONTEND_IMAGE} sh -c 'cp -r /home/node/app/packages/bundle/dist/* /target/dist/' &&
    echo "✓ Bundle updated from ${SEXY_FRONTEND_IMAGE}" &&
    docker restart sexy_api &&
    echo "✓ Directus API restarted"
  net/create: docker network create "$NETWORK_NAME"