birdnet-analytics/docker-compose.yml at main · danhon/birdnet-analytics · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
services:
  birdnet-analytics:
    build:
      context: .

    env_file: .env
    environment:
      BIRDNET_DB_PATH: /data/birdnet.db
      BIRDNET_ANALYTICS_TZ: ${BIRDNET_ANALYTICS_TZ:-America/Los_Angeles}
      BIRDNET_ANALYTICS_STATE_DIR: /var/lib/birdnet-analytics

    networks: [traefik_default]
    restart: unless-stopped

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.rule=Host(`${SERVICE_HOST}`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.entrypoints=websecure"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.tls.certresolver=le"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME}.loadbalancer.server.port=8787"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME}.middlewares=authelia@file"
      - "homepage.group=Applications"
      - "homepage.name=BirdNET Analytics"
      - "homepage.icon=mdi-chart-line"
      - "homepage.href=https://${SERVICE_HOST}"
      - "homepage.description=Bird detection analytics"
      - "homepage.instance=my-docker"

    volumes:
      - ${BIRDNET_DB_HOST_PATH:?set BIRDNET_DB_HOST_PATH in .env}:/data/birdnet.db:ro
      - birdnet-analytics-state:/var/lib/birdnet-analytics

    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp

    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8787/health').read()"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s

volumes:
  birdnet-analytics-state:

networks:
  traefik_default:
    external: true