services:
  netronome:
    image: ghcr.io/autobrr/netronome:latest
    container_name: netronome
    ports:
      - "7575:7575"
    cap_add:
      - NET_RAW # Required for MTR and privileged ping operations
    environment:
      - NETRONOME__DB_TYPE=postgres
      - NETRONOME__DB_HOST=postgres
      - NETRONOME__DB_PORT=5432
      - NETRONOME__DB_USER=netronome
      - NETRONOME__DB_PASSWORD=netronome
      - NETRONOME__DB_NAME=netronome
      - NETRONOME__DB_SSLMODE=disable

      - NETRONOME__HOST=0.0.0.0
      - NETRONOME__PORT=7575
      - NETRONOME__AUTH_WHITELIST="127.0.0.1,192.168.1.0/24,100.64.0.0/24" # CSV
    depends_on:
      postgres:
        condition: service_healthy
    restart: unless-stopped
  postgres:
    container_name: netronome-postgres
    image: postgres:17-alpine
    environment:
      - POSTGRES_USER=netronome
      - POSTGRES_PASSWORD=netronome
      - POSTGRES_DB=netronome
    volumes:
      - data:/var/lib/postgresql/data
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U netronome" ]
      interval: 5s
      timeout: 5s
      retries: 5
    restart: unless-stopped
volumes:
  data: