services:
  hermes-hub:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: hermes-hub
    restart: unless-stopped
    user: "1026:100"
    ports:
      # Bind strictement sur loopback pour n'etre accessible QUE par Cloudflare Tunnel
      - "127.0.0.1:8080:8080"
    volumes:
      - ./data:/app/data
    environment:
      - TZ=Africa/Tunis
      - HUB_DATA_DIR=/app/data
      - HUB_SECRET=${HUB_SECRET}
      - NAS_TAILSCALE_IP=100.86.197.88
      - VPS_TAILSCALE_IP=100.94.90.119
      - HERMES_TT_URL=http://100.86.197.88:3010
      - HERMES_NYORA_URL=http://100.86.197.88:3020
      - HERMES_PERSO_URL=http://100.86.197.88:3031
      - HERMES_NABIL_URL=http://127.0.0.1:8642
      - DSH_FILEBROWSER_URL=http://dsh-filebrowser:80
    depends_on:
      - dsh-filebrowser
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - hub-net
    labels:
      com.centurylinklabs.watchtower.enable: "false"

  dsh-filebrowser:
    image: filebrowser/filebrowser:v2.32.0
    container_name: dsh-filebrowser
    restart: unless-stopped
    user: "${DSH_UID:-1001}:${DSH_GID:-1001}"
    command:
      - "--noauth"
      - "--root=/srv"
      - "--baseurl=/u/nabil/files"
      - "--address=0.0.0.0"
      - "--port=80"
      - "--branding.theme=dark"
    volumes:
      - /home/dsh-agent/dsh-vps/workspace:/srv
    ports:
      # Bind strictement loopback
      - "127.0.0.1:8901:80"
    networks:
      - hub-net
    labels:
      com.centurylinklabs.watchtower.enable: "false"

networks:
  hub-net:
    driver: bridge