# Komodo Core — BF (ersetzt Portainer CE auf pve-LXC 10.40.41.126)
# Deploy auf: pve-LXC (.126), per SSH oder direkt
# Web-UI:  http://10.40.41.126:9120
# Doku:    https://komo.do/docs/setup
#
# Secrets aus .env (gitignored):
#   KOMODO_HOST, KOMODO_DB_PASSWORD, KOMODO_JWT_SECRET, KOMODO_PASSKEY

services:
  komodo-core:
    image: ghcr.io/moghtech/komodo:latest
    restart: unless-stopped
    depends_on:
      komodo-mongo:
        condition: service_healthy
    ports:
      - "9120:9120"
    environment:
      KOMODO_HOST: ${KOMODO_HOST}
      KOMODO_TITLE: "BF Komodo"
      KOMODO_PASSKEY: ${KOMODO_PASSKEY}                  # Periphery-Onboarding-Secret
      KOMODO_DATABASE_ADDRESS: komodo-mongo:27017
      KOMODO_DATABASE_USERNAME: komodo
      KOMODO_DATABASE_PASSWORD: ${KOMODO_DB_PASSWORD}
      KOMODO_JWT_SECRET: ${KOMODO_JWT_SECRET}
      KOMODO_JWT_TTL: 1d
      KOMODO_LOG_LEVEL: info
    volumes:
      - komodo-repos:/etc/komodo/repos
    networks:
      - komodo-internal

  komodo-mongo:
    image: mongo:7
    restart: unless-stopped
    command: --quiet
    environment:
      MONGO_INITDB_ROOT_USERNAME: komodo
      MONGO_INITDB_ROOT_PASSWORD: ${KOMODO_DB_PASSWORD}
    volumes:
      - komodo-mongo-data:/data/db
    networks:
      - komodo-internal
    healthcheck:
      test: ["CMD", "mongosh", "--quiet", "--eval", "db.runCommand('ping').ok"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  komodo-repos:
  komodo-mongo-data:

networks:
  komodo-internal:
    driver: bridge