# Nextcloud as the CasaOS App Store installs it (BigBear's "Nextcloud": Nextcloud 35 with smbclient, PostgreSQL, Redis
# and a cron container), web page on port 7580. What I changed from the store app:
#   - your own passwords instead of casaos/casaos: replace every CHANGE_ME, the two POSTGRES_PASSWORD values must match
#   - the files go to HDD1 (/DATA/HDD1/nextcloud, owner 33:33, see pi/README.md); the rest stays in /DATA/AppData
#   - NEXTCLOUD_TRUSTED_DOMAINS, so the first visit doesn't end in "Access through untrusted domain"
# The name stays big-bear-nextcloud: CasaOS then offers the store's newer images as updates, and an update only swaps
# the images, so these changes stay.
name: big-bear-nextcloud
services:
  nextcloud:
    container_name: nextcloud
    image: bigbeartechworld/big-bear-nextcloud-with-smbclient:35.0.2@sha256:8fe245e137a6ae96a58b9ad4c5f782efa01197c36b892af1a8a9a6a206369475
    restart: unless-stopped
    ports:
      - "7580:80"
    volumes:
      - /DATA/AppData/big-bear-nextcloud/html:/var/www/html
      # long form on purpose: without the drive the folder is missing and the app doesn't start, instead of
      # filling the SD card
      - type: bind
        source: /DATA/HDD1/nextcloud
        target: /var/www/html/data
    environment:
      POSTGRES_HOST: db-nextcloud
      POSTGRES_DB: nextcloud
      POSTGRES_USER: casaos
      POSTGRES_PASSWORD: CHANGE_ME
      REDIS_HOST: redis-nextcloud
      NEXTCLOUD_ADMIN_USER: casaos
      NEXTCLOUD_ADMIN_PASSWORD: CHANGE_ME
      # only read on the first start; put your Pi's IP instead of 192.168.1.50
      NEXTCLOUD_TRUSTED_DOMAINS: raspberrypi.local raspberrypi 192.168.1.50
      TRUSTED_PROXIES: ""
      OVERWRITEPROTOCOL: http
      PHP_MEMORY_LIMIT: 1024M
      PHP_UPLOAD_LIMIT: 1024M
    depends_on:
      db-nextcloud:
        condition: service_healthy
      redis-nextcloud:
        condition: service_healthy
    networks:
      - nextcloud_network

  db-nextcloud:
    container_name: db-nextcloud
    image: postgres:14.2@sha256:2c954f8c5d03da58f8b82645b783b56c1135df17e650b186b296fa1bb71f9cfd
    restart: unless-stopped
    volumes:
      - /DATA/AppData/big-bear-nextcloud/pgdata:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: nextcloud
      POSTGRES_USER: casaos
      POSTGRES_PASSWORD: CHANGE_ME
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U casaos -d nextcloud"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - nextcloud_network

  redis-nextcloud:
    container_name: redis-nextcloud
    image: redis:6.2.20@sha256:d06ff6ec778c7f2a5c0dfaf58141d598efaa50a89d0e966faedfdf122cef451b
    user: "1000:1000"
    restart: unless-stopped
    volumes:
      - /DATA/AppData/big-bear-nextcloud/redis:/data
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - nextcloud_network

  # Nextcloud's background jobs (every 5 minutes), same image and folders as the web container
  cron:
    image: bigbeartechworld/big-bear-nextcloud-with-smbclient:35.0.2@sha256:8fe245e137a6ae96a58b9ad4c5f782efa01197c36b892af1a8a9a6a206369475
    restart: unless-stopped
    entrypoint: /cron.sh
    volumes:
      - /DATA/AppData/big-bear-nextcloud/html:/var/www/html
      - type: bind
        source: /DATA/HDD1/nextcloud
        target: /var/www/html/data
    depends_on:
      db-nextcloud:
        condition: service_healthy
      redis-nextcloud:
        condition: service_healthy
    networks:
      - nextcloud_network

networks:
  nextcloud_network:
    driver: bridge

x-casaos:
  architectures:
    - amd64
    - arm64
  main: nextcloud
  author: BigBearTechWorld
  developer: nextcloud
  category: Media
  icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/nextcloud.png
  title:
    en_US: Nextcloud
  tagline:
    en_US: The productivity platform that keeps you in control
  port_map: "7580"
  scheme: http
  index: /

# Jellyfin as the CasaOS App Store installs it (BigBear's "Jellyfin", the linuxserver.io image), web page on port 8096.
# The only change from the store app: the movies and shows folders are on HDD1 (/DATA/HDD1/media, see pi/README.md)
# instead of /DATA/AppData/jellyfin/data on the SD card. In Jellyfin, add them as /data/movies and /data/tvshows.
# The Pi 5 has no hardware video encoder, so there is no /dev/dri here: Jellyfin transcodes on the CPU.
name: big-bear-linuxserver-jellyfin
services:
  app:
    image: linuxserver/jellyfin:12.1ubu2604-ls50@sha256:51252e7a416e703cdc3cd91e8a54673a2430cc80409be8a38abe511411577b95
    restart: unless-stopped
    environment:
      # CasaOS fills these in (1000, 1000 and the Pi's time zone); the values after :- are for plain docker compose
      PUID: ${PUID:-1000}
      PGID: ${PGID:-1000}
      TZ: ${TZ:-Etc/UTC}
      JELLYFIN_PublishedServerUrl: ""
    ports:
      - target: 8096
        published: "8096"
        protocol: tcp
      - target: 8920
        published: "8920"
        protocol: tcp
      # client discovery and DLNA
      - target: 7359
        published: "7359"
        protocol: udp
      - target: 1900
        published: "1900"
        protocol: udp
    volumes:
      - /DATA/AppData/jellyfin/config:/config
      # long form on purpose: without the drive the folders are missing and the app doesn't start
      - type: bind
        source: /DATA/HDD1/media/tvshows
        target: /data/tvshows
      - type: bind
        source: /DATA/HDD1/media/movies
        target: /data/movies

x-casaos:
  architectures:
    - amd64
    - arm64
  main: app
  author: WisdomSky
  developer: LinuxServer.io
  category: Media
  icon: https://cdn.jsdelivr.net/gh/linuxserver/docker-templates@master/linuxserver.io/img/jellyfin-logo.png
  title:
    en_US: Jellyfin
  tagline:
    en_US: Your movies and shows, streamed from the NAS
  port_map: "8096"
  scheme: http
  index: /

# Immich, photo and video backup from your phone. Web page and the mobile apps on port 2283.
# This is Immich's own docker-compose.yml from release v3.3.5 (with the values of its example.env written in, because
# CasaOS can't read an .env file), the photos on HDD1 (/DATA/HDD1/immich, see pi/README.md) and the database and the
# model cache on the SD card. Replace both CHANGE_ME with the same password, letters and digits only.
# The name is immich-photos, not immich: CasaOS ties an app to the store app with the same name, and the store's
# "immich" is an older Immich (v2.7.2) that it would offer as an update. To update, change the two v3.3.5 tags
# (read Immich's release notes first).
name: immich-photos
services:
  immich-server:
    container_name: immich_server
    image: ghcr.io/immich-app/immich-server:v3.3.5
    volumes:
      # long form on purpose: without the drive the folder is missing and the app doesn't start
      - type: bind
        source: /DATA/HDD1/immich
        target: /data
      - /etc/localtime:/etc/localtime:ro
    environment:
      DB_PASSWORD: CHANGE_ME
      DB_USERNAME: postgres
      DB_DATABASE_NAME: immich
    ports:
      - "2283:2283"
    depends_on:
      - redis
      - database
    restart: unless-stopped
    healthcheck:
      disable: false

  # face recognition and smart search; the hungry one on a 4 GB Pi (pi/README.md, Immich)
  immich-machine-learning:
    container_name: immich_machine_learning
    image: ghcr.io/immich-app/immich-machine-learning:v3.3.5
    volumes:
      - /DATA/AppData/immich/model-cache:/cache
    restart: unless-stopped
    healthcheck:
      disable: false

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d
    healthcheck:
      test: redis-cli ping | grep -q PONG || exit 1
    restart: unless-stopped

  database:
    container_name: immich_postgres
    image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
    environment:
      POSTGRES_PASSWORD: CHANGE_ME
      POSTGRES_USER: postgres
      POSTGRES_DB: immich
      POSTGRES_INITDB_ARGS: "--data-checksums"
    volumes:
      - /DATA/AppData/immich/pgdata:/var/lib/postgresql/data
    shm_size: 128mb
    restart: unless-stopped
    healthcheck:
      disable: false

x-casaos:
  architectures:
    - amd64
    - arm64
  main: immich-server
  category: Media
  icon: https://cdn.jsdelivr.net/gh/IceWhaleTech/CasaOS-AppStore@main/Apps/Immich/icon.svg
  title:
    en_US: Immich
  tagline:
    en_US: Photo and video backup from your phone
  port_map: "2283"
  scheme: http
  index: /

# Tailscale as the CasaOS App Store installs it (the CasaOS "Tailscale", not BigBear's). It runs on the host network,
# so the Pi itself joins your tailnet and every app on it can be reached at the Pi's Tailscale address (100.x.y.z).
# Log in once at http://raspberrypi.local:5252. No ports to open on the router.
name: tailscale
services:
  tailscale:
    image: tailscale/tailscale:v1.98.3
    container_name: tailscale
    network_mode: host
    restart: unless-stopped
    volumes:
      - /DATA/AppData/tailscale:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    environment:
      TS_STATE_DIR: /var/lib/tailscale
    cap_add:
      - NET_ADMIN
      - NET_RAW
    # tailscaled in the background, then Tailscale's own web page on port 5252 (log in, see the address, log out)
    entrypoint: /bin/sh -c "tailscaled --state=/var/lib/tailscale/tailscaled.state & sleep 10; tailscale web --listen 0.0.0.0:5252"

x-casaos:
  architectures:
    - amd64
    - arm64
  main: tailscale
  author: ZimaOS Team
  developer: Tailscale Inc.
  category: Networking
  icon: https://cdn.jsdelivr.net/gh/IceWhaleTech/CasaOS-AppStore@main/Apps/Tailscale/icon.svg
  title:
    en_US: Tailscale
  tagline:
    en_US: Connect your devices and users together in your own secure virtual private network.
  port_map: "5252"
  scheme: http
  index: /