docker-compose.yml

# NetDash — minimal deploy (GHCR only, no git, no build)
# Linux host with Docker Compose v2
#
#   curl -fsSL https://raw.githubusercontent.com/lobrzut/netdash/main/deploy/docker-simple/install.sh | bash
#   lub: docker compose pull && docker compose up -d
#
# Auto-update (opcjonalnie):
#   docker compose --profile auto-update up -d
#   lub: docker compose -f docker-compose.yml -f docker-compose.autoupdate.yml up -d

services:
  netdash:
    image: ghcr.io/lobrzut/netdash:latest
    container_name: netdash
    restart: always
    # Słaby sprzęt homelab: limit CPU/RAM — przy potrzebie węższy CIDR (/28).
    deploy:
      resources:
        limits:
          memory: 1024M
          cpus: "1.0"
    network_mode: host
    env_file: .env
    environment:
      NETDASH_LISTEN_PORT: "18787"
      NETDASH_DEFAULT_ADMIN_PASSWORD: ${NETDASH_DEFAULT_ADMIN_PASSWORD:-changeme}
      NETDASH_DEFAULT_ADMIN_USER: ${NETDASH_DEFAULT_ADMIN_USER:-admin}
      NETDASH_SYNC_ADMIN_PASSWORD: ${NETDASH_SYNC_ADMIN_PASSWORD:-true}
      NETDASH_SCAN_SAFE_MODE: ${NETDASH_SCAN_SAFE_MODE:-true}
    volumes:
      - ./data:/app/data
    cap_add:
      - NET_RAW
    labels:
      com.centurylinklabs.watchtower.enable: "true"
    healthcheck:
      test: ["CMD-SHELL", "curl -f http://127.0.0.1:18787/api/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  watchtower:
    image: containrrr/watchtower:1.7.1
    container_name: netdash-watchtower
    restart: unless-stopped
    profiles:
      - auto-update
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      WATCHTOWER_POLL_INTERVAL: ${WATCHTOWER_POLL_INTERVAL:-86400}
      WATCHTOWER_CLEANUP: "true"
      WATCHTOWER_LABEL_ENABLE: "true"
      WATCHTOWER_INCLUDE_RESTARTING: "true"
      WATCHTOWER_ROLLING_RESTART: "true"