services:
  db:
    image: docker.io/library/postgres:17
    restart: always
    container_name: mealie-db
    hostname: mealie-db
    mem_limit: 1g
    cpu_shares: 768
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "pg_isready", "-q", "-d", "mealie", "-U", "mealieuser"]
      timeout: 45s
      interval: 10s
      retries: 10
    volumes:
      - db:/var/lib/postgresql/data:rw
    environment:
      POSTGRES_DB: mealie
      POSTGRES_USER: mealieuser
      POSTGRES_PASSWORD: michael
    #restart: on-failure:5

  mealie:
    image: ghcr.io/mealie-recipes/mealie:latest
    restart: always
    container_name: Mealie
    hostname: mealie
    mem_limit: 3g
    cpu_shares: 768
    security_opt:
      - no-new-privileges:true
    read_only: true
    ports:
      - 9925:9000
    volumes:
      - data:/app/data/:rw
    environment:
      TZ: Europe/Berlin
      PUID: 1000
      PGID: 100
      MAX_WORKERS: 1
      WEB_CONCURRENCY: 1
      ALLOW_SIGNUP: true #or false
      BASE_URL: https://mealie.scheidel.biz #or https://mealie.yourname.synology.me
      DB_ENGINE: postgres
      POSTGRES_USER: mealieuser
      POSTGRES_PASSWORD: michael
      POSTGRES_SERVER: mealie-db
      POSTGRES_PORT: 5432
      POSTGRES_DB: mealie
      SMTP_HOST: smtp.strato.de
      SMTP_PORT: 587
      SMTP_FROM_NAME: Mealie
      SMTP_AUTH_STRATEGY: TLS # Options: 'TLS', 'SSL', 'NONE'
      SMTP_FROM_EMAIL: michael.scheidel@scheidel.biz
      SMTP_USER: michael.scheidel@scheidel.biz
      SMTP_PASSWORD: ?EAM?Yes!01
      #OIDC_AUTH_ENABLED: true
      OIDC_CONFIGURATION_URL: https://authentik.scheidel.biz/application/o/mealie/.well-known/openid-configuration
      OIDC_CLIENT_ID: qj8bsNjZ9ALjCVXnmekHY2Wh3N5GVL4DdNEBpyPd
      OIDC_AUTO_REDIRECT: false
      OIDC_PROVIDER_NAME: OAuth
      OIDC_REMEMBER_ME: false
      #OIDC_AUTH_ENABLED: true
      OIDC_SIGNUP_ENABLED: true
      #- OIDC_CONFIGURATION_URL=https://authentik.cooldomain.com/application/o/mealie-demo-app/.well-known/openid-configuration
      #- OIDC_CLIENT_ID=2iXRBBFGFfzwuZUfKIwmcIUAhoUrwSdMZzRJWW1L
      #- OIDC_AUTO_REDIRECT=true
      #- OIDC_REMEMBER_ME=true
      OIDC_USER_GROUP: authentik Internals
      OIDC_ADMIN_GROUP: authentik Admins
      
    #restart: on-failure:5
    depends_on:
      db:
        condition: service_healthy

volumes:
  db:
  data: