# Radarr - Automatikus film letöltő és rendszerező
# Domain: ${SUBDOMAIN}.${DOMAIN}
# Database: None (file-based)
# RAM: ~150M (mem_limit: 512M) | Pi-compatible: Yes
#
# Environment variables:
#   DOMAIN          - Your domain (e.g., demo-felhom.eu)
#   USERDATA_PATH   - Ügyfél-tartalom gyökér (<namespace>/userdata)
#
# Storage layout (felhom userdata convention):
#   Filmtár    → ${USERDATA_PATH}/media/movies   (írható)
#   Letöltések → ${USERDATA_PATH}/downloads      (SIBLING of media — same FS → hardlink/atomic move)
# Run-identity: PUID/PGID 1000 (shared content group); UMASK=002 → group-writable output so
# the media server + FileBrowser can manage the files radarr produces.

services:
  radarr:
    image: lscr.io/linuxserver/radarr:5.17.2
    container_name: radarr
    restart: unless-stopped
    environment:
      - TZ=Europe/Budapest
      - PUID=1000
      - PGID=1000
      - UMASK=002
    volumes:
      - radarr_config:/config
      - ${USERDATA_PATH}/media/movies:/media/movies
      - ${USERDATA_PATH}/downloads:/downloads
    networks:
      - traefik-public
    deploy:
      resources:
        limits:
          memory: 512M
    healthcheck:
      test: ["CMD", "curl", "-f", "http://127.0.0.1:7878/ping"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.radarr.rule=Host(`${SUBDOMAIN}.${DOMAIN}`)"
      - "traefik.http.routers.radarr.entrypoints=websecure"
      - "traefik.http.routers.radarr.tls=true"
      - "traefik.http.routers.radarr.tls.certresolver=letsencrypt"
      - "traefik.http.services.radarr.loadbalancer.server.port=7878"

volumes:
  radarr_config:

networks:
  traefik-public:
    external: true