services:
  # --------------------------
  # Netdata Manager
  # --------------------------
  netdata:
    image: netdata/netdata:latest
    container_name: netdata
    ports:
      - "7001:19999"
    cap_add:
      - SYS_PTRACE
      - SYS_ADMIN
    security_opt:
      - apparmor:unconfined
    volumes:
      - netdata_config:/etc/netdata
      - netdata_lib:/var/lib/netdata
      - netdata_cache:/var/cache/netdata
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /:/host/root:ro,rslave
      - /etc/passwd:/host/etc/passwd:ro
      - /etc/group:/host/etc/group:ro
      - /etc/os-release:/host/etc/os-release:ro
    environment:
      - NETDATA_CLAIM_TOKEN=${NETDATA_CLAIM_TOKEN:-}
      - NETDATA_CLAIM_URL=https://app.netdata.cloud
    networks:
      - monitoring-net
    restart: unless-stopped
    profiles:
      - netdata-manager

  # --------------------------
  # Portainer Manager
  # --------------------------
  portainer:
    image: portainer/portainer-ce:latest
    container_name: portainer
    ports:
      - "7002:9000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - portainer_data:/data
    networks:
      - monitoring-net
    restart: unless-stopped
    extra_hosts:
      - "server-pi:192.168.1.35"
      - "private-pi:192.168.1.111"
    security_opt:
      - no-new-privileges:true
    profiles:
      - portainer-manager

  # --------------------------
  # Portainer Agent
  # --------------------------
  portainer_agent:
    image: portainer/agent:latest
    container_name: portainer_agent
    restart: unless-stopped
    ports:
      - "9001:9001"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_agent_data:/data
    networks:
      - monitoring-net
    profiles:
      - portainer-agent

  # --------------------------
  # Netdata Agent
  # --------------------------
  netdata_node:
    image: netdata/netdata:edge
    container_name: netdata_agent
    restart: unless-stopped
    ports:
      - "7003:19999"
    cap_add:
      - SYS_PTRACE
      - SYS_ADMIN
    security_opt:
      - apparmor:unconfined
    volumes:
      - netdata_config:/etc/netdata
      - netdata_lib:/var/lib/netdata
      - netdata_cache:/var/cache/netdata
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /:/host/root:ro,rslave
      - /etc/passwd:/host/etc/passwd:ro
      - /etc/group:/host/etc/group:ro
      - /etc/os-release:/host/etc/os-release:ro
    environment:
      - NETDATA_STREAM_PARENT=https://netdata.aetoskia.com
      - NETDATA_CLAIM_TOKEN=baiLAOz-VoOsvVNhG1CLi6j14rL3bmYtWHIEfwfRFRX5VhnQDUxpSvKQ3WsSrH2lRw-obUX2tWxIepN9BrYHUppnXfkPndpLCeeDwH4P0ItJ7twkCL77XPnMcQnL8hqN9pBpFIs
      - NETDATA_CLAIM_URL=https://app.netdata.cloud
      - NETDATA_CLAIM_ROOMS=2fe293fe-ebff-43b9-9ad4-0b2206d29d26
    networks:
      - monitoring-net
    profiles:
      - netdata-node

volumes:
  portainer_data:
  portainer_agent_data:
  netdata_config:
  netdata_lib:
  netdata_cache:

networks:
  monitoring-net:
    driver: bridge