services:
  vikunja:
    image: vikunja/vikunja:latest
    networks:
      - netgrimoire

    environment:
      TZ: America/Chicago
      PUID: "1001"
      PGID: "998"
      VIKUNJA_SERVICE_PUBLICURL: "https://task.netgrimoire.com"
      VIKUNJA_DATABASE_HOST: "vikdb"
      VIKUNJA_DATABASE_PASSWORD: "F@lcon13"
      VIKUNJA_DATABASE_TYPE: "mysql"
      VIKUNJA_DATABASE_USER: "vikunja"
      VIKUNJA_DATABASE_DATABASE: "vikunja"
      VIKUNJA_SERVICE_JWTSECRET: "vikunja"

    user: "1001:998"

    ports:
      - target: 3456
        published: 3456
        protocol: tcp
        mode: ingress

    volumes:
      - /DockerVol/vikunja/files:/app/vikunja/files

    deploy:
      placement:
        constraints:
          - node.hostname == docker4

      labels:
        # Homepage
        homepage.group: "PNCHarris Apps"
        homepage.name: "Vikunja"
        homepage.icon: "vikunja.png"
        homepage.href: "https://task.netgrimoire.com"
        homepage.description: "Task Manager"

        # Kuma
        kuma.vik.http.name: "Vikunja"
        kuma.vik.http.url: "http://vikunja:3456"

        # Caddy
        caddy: "task.netgrimoire.com"
        caddy.import: "authentik"
        caddy.reverse_proxy: "{{upstreams 3456}}"

        # Diun (image update monitoring)
        diun.enable: "true"

  vikdb:
    image: mariadb:10.6
    networks:
      - netgrimoire

    command: --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci

    environment:
      TZ: America/Chicago
      PUID: "1001"
      PGID: "998"
      MYSQL_ROOT_PASSWORD: "F@lcon13"
      MYSQL_USER: "vikunja"
      MYSQL_PASSWORD: "F@lcon13"
      MYSQL_DATABASE: "vikunja"

    user: "1001:998"

    volumes:
      - /DockerVol/vikunja/db:/var/lib/mysql

    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h localhost -u $MYSQL_USER --password=$MYSQL_PASSWORD"]
      interval: 10s
      timeout: 5s
      retries: 10


    deploy:
      placement:
        constraints:
          - node.hostname == docker4

      labels:
        # Diun (image update monitoring)
        diun.enable: "true"

networks:
  netgrimoire:
    external: true