---
version: "3.8"

services:
  app:
    image: grafana/alloy:v1.16.1
    hostname: "${DOMAIN}"
    configs:
      - source: config_alloy
        target: /etc/alloy/config.alloy
    volumes:
      - /:/rootfs:ro
      - /var/run:/var/run:rw
      - /var/run/docker.sock:/var/run/docker.sock
      - /sys:/sys:ro
      - /var/lib/docker:/var/lib/docker:ro
      - /dev:/dev:ro
      - alloy-data:/var/lib/alloy/data
    command:
      - "run"
      - "--storage.path=/var/lib/alloy/data"
      - "/etc/alloy/config.alloy"
    networks:
      - internal
    secrets:
      - basic_auth
    deploy:
      restart_policy:
        condition: on-failure
      labels:
        - "backupbot.backup=${ENABLE_BACKUPS:-true}"
        - "traefik.enable=false"
        - "coop-cloud.${STACK_NAME}.version=1.6.0+v1.8.1"
configs:
  config_alloy:
    template_driver: golang
    name: ${STACK_NAME}_config_alloy_${CONFIG_ALLOY_VERSION}
    file: config.alloy.tmpl
networks:
  proxy:
    external: true
  internal:
volumes:
  alloy-data:
secrets:
  basic_auth:
    external: true
    name: ${STACK_NAME}_basic_auth_${SECRET_BASIC_AUTH_VERSION}