version: "3.8"

services:
  memos-init:
    image: neosmemo/memos:stable
    user: "0"
    entrypoint: ["sh", "-c", "chown -R 65532:65532 /var/opt/memos && echo 'Permissions fixed'"]
    volumes:
      - memos_data:/var/opt/memos
    restart: "no"
    deploy:
      restart_policy:
        condition: none
        delay: 0s
        max_attempts: 1
        window: 0s

  memos:
    image: neosmemo/memos:stable
    restart: unless-stopped
    depends_on:
      memos-init:
        condition: service_completed_successfully
    volumes:
      - memos_data:/var/opt/memos
    environment:
      - MEMOS_MODE=${MEMOS_MODE}
      - MEMOS_PORT=${MEMOS_PORT}
    ports:
      - "5230"
    networks:
      - dokploy-network
    labels:
      - traefik.http.routers.memos-web.rule=Host(`memos.bendtstudio.com`)
      - traefik.http.routers.memos-web.entrypoints=web
      - traefik.http.services.memos-web.loadbalancer.server.port=5230
      - traefik.http.routers.memos-web.service=memos-web
      - traefik.http.routers.memos-web.middlewares=redirect-to-https@file
      - traefik.http.routers.memos-websecure.rule=Host(`memos.bendtstudio.com`)
      - traefik.http.routers.memos-websecure.entrypoints=websecure
      - traefik.http.services.memos-websecure.loadbalancer.server.port=5230
      - traefik.http.routers.memos-websecure.service=memos-websecure
      - traefik.http.routers.memos-websecure-websecure.tls.certresolver=letsencrypt
      - traefik.enable=true

volumes:
  memos_data:

networks:
  dokploy-network:
    external: true