networks:
  mktxp: {}

volumes:
  prometheus_storage: {}
  grafana_storage: {}

services:
  mktxp:
    container_name: mktxp
    image: ghcr.io/akpw/mktxp:latest
    user: root
    volumes:
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/mktxp
        target: /root/mktxp
        bind:
          propagation: rshared
    networks:
      mktxp: null
    restart: unless-stopped
    security_opt:
      - label:disable

  grafana:
    container_name: grafana
    environment:
      GF_AUTH_ANONYMOUS_ENABLED: "true"
      GF_AUTH_ANONYMOUS_ORG_ROLE: Admin
      GF_AUTH_BASIC_ENABLED: "false"
      GF_AUTH_DISABLE_LOGIN_FORM: "true"
      GF_USERS_DEFAULT_THEME: "light"
      GF_DASHBOARDS_DEFAULT_HOME_DASHBOARD_PATH: /etc/grafana/provisioning/dashboards/mikrotik/mikrotik_mktxp_exporter.json
    image: grafana/grafana:latest
    networks:
      mktxp: null
    ports:
      - protocol: tcp
        published: 3000
        target: 3000
    restart: unless-stopped
    security_opt:
      - label:disable
    volumes:
      - grafana_storage:/var/lib/grafana
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/grafana/provisioning/datasources
        target: /etc/grafana/provisioning/datasources
        read_only: true
        bind:
          propagation: rshared
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/grafana/provisioning/dashboards
        target: /etc/grafana/provisioning/dashboards
        read_only: true
        bind:
          propagation: rshared

  loki:
    command: -config.file=/etc/loki/loki-config.yml
    container_name: loki
    image: grafana/loki:latest
    networks:
      mktxp: null
    ports:
      - protocol: tcp
        published: 3100
        target: 3100
    restart: unless-stopped
    security_opt:
      - label:disable
    volumes:
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/loki/loki-config.yml
        target: /etc/loki/loki-config.yml
        bind:
          propagation: rshared

  prometheus:
    command:
      - --config.file=/etc/prometheus/prometheus.yml
      - --storage.tsdb.path=/prometheus
      - --storage.tsdb.retention.time=1y
      - --web.enable-admin-api
      - --web.enable-lifecycle
    container_name: prometheus
    image: prom/prometheus:latest
    networks:
      mktxp: null
    ports:
      - published: 9090
        target: 9090
    restart: unless-stopped
    security_opt:
      - label:disable
    volumes:
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/prometheus/prometheus.yml
        target: /etc/prometheus/prometheus.yml
        read_only: true
        bind:
          propagation: rshared
      - prometheus_storage:/prometheus

  promtail:
    command: -config.file=/etc/promtail/promtail-config.yml
    container_name: promtail
    image: grafana/promtail:latest
    networks:
      mktxp: null
    ports:
      - protocol: tcp
        published: 1514
        target: 1514
      - protocol: tcp
        published: 9080
        target: 9080
    restart: unless-stopped
    security_opt:
      - label:disable
    volumes:
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/promtail/promtail-config.yml
        target: /etc/promtail/promtail-config.yml
        read_only: true
        bind:
          propagation: rshared

  syslog-ng:
    command: -edv
    container_name: syslog-ng
    depends_on:
      - promtail
    image: balabit/syslog-ng:latest
    networks:
      mktxp: null
    ports:
      - protocol: udp
        published: 514
        target: 514
      - protocol: tcp
        published: 601
        target: 601
    restart: unless-stopped
    security_opt:
      - label:disable
    volumes:
      - type: bind
        source: /mnt/containers/mktxp/mktxp-stack/syslog-ng/syslog-ng.conf
        target: /etc/syslog-ng/syslog-ng.conf
        read_only: true
        bind:
          propagation: rshared