docker-compose.yml

services:
  flaresolverr:
    profiles: ["flaresolverr"]
    image: ghcr.io/flaresolverr/flaresolverr:latest
    container_name: ${FLARESOLVERR_CONTAINER_NAME:-flaresolverr}
    environment:
      LOG_LEVEL: "info"
      PROXY_URL: "${FLARESOLVERR_PROXY_URL:-}"
    ports:
      - "8191:8191"
    networks:
      - vibravid_network
    restart: unless-stopped

  bypasser:
    profiles: ["bypasser"]
    build:
      context: ./docker/bypasser
    container_name: ${BYPASSER_CONTAINER_NAME:-bypasser}
    shm_size: "1gb"
    ports:
      - "8192:8192"
    networks:
      - vibravid_network
    restart: unless-stopped

  vibravid:
    image: ghcr.io/astraelabs/vibravid:${VIBRAVID_TAG:-latest}
    build:
      context: .
      dockerfile: dockerfile
    container_name: ${VIBRAVID_CONTAINER_NAME:-vibravid}

    ### Networking
    ports:
      - "${VIBRAVID_PORT:-8000}:8000"
    # Uncomment for custom DNS (e.g., Cloudflare DNS)
    # dns:
    #   - 1.1.1.1
    #   - 8.8.8.8
    networks:
      - vibravid_network

    ### Service dependencies
    # Both sidecars are optional (see their "profiles" above) and gated with
    # required: false so `docker compose up` works fine with neither enabled.
    depends_on:
      flaresolverr:
        condition: service_started
        required: false
      bypasser:
        condition: service_started
        required: false

    ### Volumes - Persistent Data
    volumes:
      # SQLite DB + any future per-install state (isolated dir, does NOT overlay app code).
      # Override with a host path via VIBRAVID_DB_DIR in .env (e.g. /volume1/docker/vibravid/db).
      - ${VIBRAVID_DB_DIR:-vibravid_db}:/app/data
      # Downloads. Override with a host path via VIBRAVID_VIDEO_DIR to store files on bulk storage
      # (e.g. /volume2/Movies on a NAS). Named volume used when variable is not set.
      - ${VIBRAVID_VIDEO_DIR:-vibravid_videos}:/app/Video
      # Logs persistence
      - ${VIBRAVID_LOGS_DIR:-vibravid_logs}:/app/.cache/logs
      # Configuration persistence
      - ${VIBRAVID_CONFIG_DIR:-vibravid_config}:/app/Conf
      # CDM / binary directory persistence
      - ${VIBRAVID_BINARY_DIR:-vibravid_binary}:/home/appuser/.local/bin/binary
      # Docker socket — enables the in-app "Update now" button to pull the new
      # image and recreate the container by driving the host Docker daemon.
      - /var/run/docker.sock:/var/run/docker.sock
      # NOTE: /app/VibraVid/services is INTENTIONALLY NOT a named volume.
      # If it were, the volume would freeze the services directory to the
      # snapshot captured the first time the container started, and any
      # bugfix to a service's code in a later image rebuild would be hidden
      # behind the stale volume content. Tradeoff: plugins uploaded via
      # the web UI live only inside the container's writable layer and are
      # lost on container recreation (down/up --build). Re-upload after
      # rebuilds, or bake the plugin into your fork of the repo.

    ### Environment Variables
    environment:
      DJANGO_DEBUG: "false"
      DJANGO_DB_DIR: "/app/data"
      DJANGO_SECRET_KEY: "change-me-to-a-secure-key"
      PYTHONUNBUFFERED: "1"
      PYTHONPATH: "/app:${PYTHONPATH}"

      # User / group ID for file ownership on host-mounted volumes.
      # Set these to match the uid/gid that owns your NAS share so that
      # downloaded files are writable by your normal user. Run `id <user>`
      # on the NAS host to find the correct values.
      # PUID: "1000"
      # PGID: "1000"

      # Host Configuration
      ALLOWED_HOSTS: "localhost,127.0.0.1,vibravid"
      CSRF_TRUSTED_ORIGINS: "http://localhost:8000,http://127.0.0.1:8000"

      # ── Cloudflare-challenge solver sidecars ──
      FLARESOLVERR_URL: "http://flaresolverr:8191"
      BYPASSER_URL: "http://bypasser:8192"
      
      # Uncomment for private network deployment (behind reverse proxy)
      # USE_X_FORWARDED_HOST: "true"
      # SECURE_PROXY_SSL_HEADER_ENABLED: "true"
      # CSRF_COOKIE_SECURE: "true"
      # SESSION_COOKIE_SECURE: "true"

      # Optional: Watchlist Auto-Download Interval (seconds)
      # WATCHLIST_AUTO_INTERVAL_SECONDS: "14400"

      # ── ARR Integration (Sonarr / Radarr / Overseerr) ──
      # TMDB credentials are configured exclusively through the environment.
      TMDB_API_KEY: "${TMDB_API_KEY:-}"
      # USE_ARR_SERVICES: "false"
      # ENABLE_ARR_POLLING: "true"
      # ENABLE_SEERR_WEBHOOK: "false"
      # ARR_POLLING_INTERVAL: "300"
      # ARR_FULL_RESYNC_INTERVAL: "21600"
      # SONARR_URL: "http://sonarr:8989"
      # SONARR_API_KEY: ""
      # RADARR_URL: "http://radarr:7878"
      # RADARR_API_KEY: ""
      # SEERR_WEBHOOK_SECRET: ""

    ### Restart Policy
    restart: unless-stopped

    ### Resource Limits (optional)
    # deploy:
    #   resources:
    #     limits:
    #       cpus: '2'
    #       memory: 2G
    #     reservations:
    #       cpus: '1'
    #       memory: 1G

  telegram:
    profiles: ["telegram"]
    image: ghcr.io/astraelabs/vibravid:${VIBRAVID_TAG:-latest}
    build:
      context: .
      dockerfile: dockerfile
    container_name: ${TELEGRAM_CONTAINER_NAME:-vibravid-telegram}
    entrypoint: ["/bin/sh", "/app/docker/telegram-entrypoint.sh"]

    networks:
      - vibravid_network

    depends_on:
      vibravid:
        condition: service_started

    ### Credentials: dedicated .env file
    env_file:
      - path: ./.env.telegram
        required: false

    volumes:
      # Read-only: the bot only reads the TELEGRAM section of config.json
      # (enabled/gui_url/max_results); it never writes to Conf.
      - ${VIBRAVID_CONFIG_DIR:-vibravid_config}:/app/Conf:ro
      # Telethon session + per-user site-filter prefs. Writable, bot-only.
      - telegram_state:/app/tgstate

    environment:
      PYTHONUNBUFFERED: "1"
      PYTHONPATH: "/app:${PYTHONPATH}"
      STATE_DIR: "/app/tgstate"
      VIBRAVID_CONFIG: "/app/Conf/config.json"
      # TG_GUI_URL default (http://vibravid:8000) already matches this
      # compose network; override here or in .env.telegram if needed.
      # VIBRAVID_BOT_SECRET: ""

    restart: unless-stopped

### Persistent Named Volumes
# These are only created when the corresponding VIBRAVID_*_DIR variable is NOT set to a host
# path. If you override a variable with a host path (e.g. VIBRAVID_VIDEO_DIR=/mnt/nas/movies),
# Docker uses a bind mount and the named volume below is NOT created.
volumes:
  vibravid_db:
    driver: local
  vibravid_videos:
    driver: local
  vibravid_logs:
    driver: local
  vibravid_config:
    driver: local
  vibravid_binary:
    driver: local
  telegram_state:
    driver: local

### Internal Network
networks:
  vibravid_network:
    driver: bridge