name: immich

services:
  server:
    image: ghcr.io/immich-app/immich-server:v1.133.0
    container_name: immich_server
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    user: 10002:10002
    depends_on:
      - redis
      - db
    restart: unless-stopped
    healthcheck:
      disable: false
    volumes:
      - photos:/usr/src/app/upload
      - /etc/localtime:/etc/localtime:ro
    #ports:
      #- 2283:2283
    networks:
      - internal
      - proxy
    environment:
      DB_HOSTNAME: db
      DB_DATABASE_NAME_FILE: /run/secrets/db_name
      DB_USERNAME_FILE: /run/secrets/db_user
      DB_PASSWORD_FILE: /run/secrets/db_pass
    secrets:
      - db_name
      - db_user
      - db_pass
    

  machine-learning:
    # For hardware acceleration, add one of -[armnn, cuda, openvino] to the image tag.
    # Example tag: ${IMMICH_VERSION:-release}-cuda
    image: ghcr.io/immich-app/immich-machine-learning:v1.133.0
    container_name: immich_machine_learning
    # extends: # uncomment this section for hardware acceleration - see https://immich.app/docs/features/ml-hardware-acceleration
    #   file: hwaccel.ml.yml
    #   service: cpu # set to one of [armnn, cuda, openvino, openvino-wsl] for accelerated inference - use the `-wsl` version for WSL2 where applicable
    restart: unless-stopped
    healthcheck:
      disable: false
    volumes:
      - model-cache:/cache
    networks:
      - internal

  redis:
    container_name: immich_redis
    image: docker.io/valkey/valkey:8-bookworm@sha256:ff21bc0f8194dc9c105b769aeabf9585fea6a8ed649c0781caeac5cb3c247884
    restart: unless-stopped
    healthcheck:
      test: redis-cli ping || exit 1
    networks:
      - internal

  db:
    image: ghcr.io/immich-app/postgres:14-vectorchord0.3.0-pgvectors0.2.0
    container_name: immich_db_pg14
    restart: unless-stopped
    volumes:
      - db:/var/lib/postgresql/data    
    networks:
      - internal
    environment:
      POSTGRES_DB_FILE: /run/secrets/db_name
      POSTGRES_USER_FILE: /run/secrets/db_user
      POSTGRES_PASSWORD_FILE: /run/secrets/db_pass
      POSTGRES_INITDB_ARGS: '--data-checksums'
      # Uncomment the DB_STORAGE_TYPE: 'HDD' var if your database isn't stored on SSDs
      # DB_STORAGE_TYPE: 'HDD'
    secrets:
      - db_name
      - db_user
      - db_pass

volumes:
  model-cache:
    name: immich_model_cache
  db:
    name: immich_db
  photos:
    name: immich_photos
    driver_opts:
      type: "nfs"
      o: "addr=data.akumatic.eu,nfsvers=4"
      device: ":/mnt/data/services/photos"

networks:
  internal:
    name: immich-internal
  proxy:
    name: proxy-immich
    external: true

secrets:
  db_name:
    file: /srv/docker/secrets/immich/db/name.txt
  db_user:
    file: /srv/docker/secrets/immich/db/user.txt
  db_pass:
    file: /srv/docker/secrets/immich/db/pass.key