services:
  navidrome:
    image: deluan/navidrome:latest
    container_name: navidrome
    networks:
      - navidrome_network
    ports:
      - "127.0.0.1:4533:4533"
    volumes:
      - nd-config:/data
      - ${MUSIC_PATH}:/music:ro,nosuid,nodev  # recursive 'rx'
    restart: 'unless-stopped'
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - NET_BIND_SERVICE
    security_opt:
      - no-new-privileges:true
    read_only: true
    tmpfs:
      - /tmp:size=512M
      - /var/tmp:size=100M
      - /var/run:size=10M
    deploy:
      resources:
        limits:
          cpus: 0.5
          memory: 512M
    logging:
      driver: json-file
      options:
        max-size: 10m
    environment:
      PUID: ${PUID}
      PGID: ${PGID}
      TZ: "Asia/Shanghai"
      ND_SCANNER_SCHEDULE: "0 */6 * * *"
      ND_LOGLEVEL: "info"
      ND_SESSIONTIMEOUT: "24h"
      ND_DEFAULTLANGUAGE: "zh-Hans"
      ND_ENABLEDOWNLOADS: "false"
      ND_ENABLETRANSCODINGCONFIG: "false"  # could be "true" before configured
      ND_UILOGINBACKGROUNDURL: "https://www.loliapi.com/acg/"

volumes:
  nd-config:
    driver: local

networks:
  navidrome_network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16