services:
  unifi-os-server:
    image: ghcr.io/lemker/unifi-os-server:v1.0.0@sha256:ac1e2d669b57fe13586ec478b359bf50428591a085ff439bce581e5514aa1282
    container_name: unifi-os-server
    cgroup: host
    cap_add:
      - NET_RAW
      - NET_ADMIN
    extra_hosts:
      host.docker.internal: host-gateway
    tmpfs:
      - /run:exec
      - /run/lock
      - /tmp:exec
      - /var/lib/journal
      - /var/opt/unifi/tmp:size=64m
    environment:
      - UOS_SYSTEM_IP=${SYSTEM_IP}
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup:rw
      - ${DATA_DIR}/persistent:/persistent
      - ${DATA_DIR}/var-log:/var/log
      - ${DATA_DIR}/data:/data
      - ${DATA_DIR}/srv:/srv
      - ${DATA_DIR}/var-lib-unifi:/var/lib/unifi
      - ${DATA_DIR}/var-lib-mongodb:/var/lib/mongodb
      - ${DATA_DIR}/etc-rabbitmq-ssl:/etc/rabbitmq/ssl
    ports:
      - 11443:443
      - 5005:5005 # Optional
      - 9543:9543 # Optional
      - 6789:6789 # Optional
      - 8080:8080
      - 8443:8443 # Optional
      - 8444:8444 # Optional
      - 3478:3478/udp
      - 5514:5514/udp # Optional
      - 10003:10003/udp
      - 11084:11084 # Optional
      - 5671:5671 # Optional
      - 8880:8880 # Optional
      - 8881:8881 # Optional
      - 8882:8882 # Optional
    restart: unless-stopped