docker-compose.yaml

volumes:
  database:

services:
  postgres:
    build:
      context: postgres
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    volumes:
      - database:/var/lib/postgresql/data
      #- ./config/sql:/config/sql
      #- ./docker/init-invidious-db.sh:/docker-entrypoint-initdb.d/init-invidious-db.sh
    environment:
      - POSTGRES_DB=invidious
      - POSTGRES_USER=invidious
      - POSTGRES_PASSWORD=${INVIDIOUS_POSTGRES_PASSWORD}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
    labels:
      - "backup-volume.stop-during-backup=true"
      
  invidious:
    image: ${INVIDIOUS_IMAGE}
    # build:
    #   context: https://github.com/iv-org/invidious.git
    #   dockerfile: docker/Dockerfile
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      INVIDIOUS_CONFIG: |
        channel_threads: 1
        check_tables: true
        feed_threads: 1
        db:
          user: invidious
          password: ${INVIDIOUS_POSTGRES_PASSWORD}
          host: postgres
          port: 5432
          dbname: invidious
        full_refresh: false
        https_only: false
        domain: ${INVIDIOUS_TRAEFIK_HOST}
        statistics_enabled: ${INVIDIOUS_STATISTICS_ENABLED}
        hmac_key: ${INVIDIOUS_HMAC_KEY}
        signature_server: inv_sig_helper:12999
        visitor_data: ${INVIDIOUS_VISITOR_DATA}
        po_token: ${INVIDIOUS_PO_TOKEN}
        use_innertube_for_captions: false
        use_pubsub_feeds: false
    healthcheck:
      test: wget -nv --tries=1 --spider http://127.0.0.1:3000/api/v1/comments/jNQXAC9IVRw || exit 1
      interval: 30s
      timeout: 5s
      retries: 2
    logging:
      options:
        max-size: "1G"
        max-file: "4"
    depends_on:
      - postgres
    # labels are defined in docker-compose.instance.yaml:
    labels: []

  inv_sig_helper:
    image: quay.io/invidious/inv-sig-helper:latest
    init: true
    command: ["--tcp", "0.0.0.0:12999"]
    environment:
      - RUST_LOG=info
    restart: unless-stopped
    cap_drop:
      - ALL
    read_only: true
    security_opt:
      - no-new-privileges:true
    labels:
      - "backup-volume.stop-during-backup=true"