name: grafana
networks:
  loki: null
services:
  grafana:
    container_name: grafana
    entrypoint:
    - sh
    - -euc
    - "mkdir -p /etc/grafana/provisioning/datasources\ncat <<EOF > /etc/grafana/provisioning/datasources/ds.yaml\n\
      apiVersion: 1\ndatasources:\n- name: Loki\n  type: loki\n  access: proxy\n \
      \ orgId: 1\n  url: http://loki:3100\n  basicAuth: false\n  isDefault: true\n\
      \  version: 1\n  editable: false\nEOF\n/run.sh\n"
    environment:
      GF_AUTH_GENERIC_OAUTH_API_URL: https://auth.sectorq.eu/application/o/userinfo/
      GF_AUTH_GENERIC_OAUTH_AUTH_URL: https://auth.sectorq.eu/application/o/authorize/
      GF_AUTH_GENERIC_OAUTH_CLIENT_ID: xc8AKsYOvHFmYnRjfnvt2YfgR5pg8Mlfc9YEqd3T
      GF_AUTH_GENERIC_OAUTH_CLIENT_SECRET: gb5ThPlyIUN2I8UPvIKAqQBoGFmTAb7tFxt5OiJQkAG6Ef2HDKksNOjWPJFfXiO22RuCnWuyzl6IMqPYO6QTa55EYfoN5N87enh5MOhTXjo2JTTnEL1eZhEI1Sw1vBO8
      GF_AUTH_GENERIC_OAUTH_ENABLED: 'true'
      GF_AUTH_GENERIC_OAUTH_NAME: authentik
      GF_AUTH_GENERIC_OAUTH_ROLE_ATTRIBUTE_PATH: contains(groups, 'Grafana Admins')
        && 'Admin' || contains(groups, 'Grafana Editors') && 'Editor' || 'Viewer'
      GF_AUTH_GENERIC_OAUTH_SCOPES: openid profile email
      GF_AUTH_GENERIC_OAUTH_TOKEN_URL: https://auth.sectorq.eu/application/o/token/
      GF_AUTH_OAUTH_AUTO_LOGIN: 'true'
      GF_AUTH_SIGNOUT_REDIRECT_URL: https://auth.sectorq.eu/application/o/grafana/end-session/
      GF_INSTALL_PLUGINS: https://storage.googleapis.com/integration-artifacts/alexanderzobnin-zabbix-app/4.5.7/main/163fabf651b776bf70adc08fa41bec4f52645374/alexanderzobnin-zabbix-app-4.5.7%2B163fabf6.linux_amd64.zip;alexanderzobnin-zabbix-app
      GF_LOG_FILTERS: rendering:debug
      GF_RENDERING_CALLBACK_URL: http://grafana:3000/
      GF_RENDERING_SERVER_URL: http://renderer:8092/render
      GF_SERVER_ROOT_URL: https://g.sectorq.eu/
    image: ${DOCKER_REGISTRY:-}grafana/grafana:latest
    labels:
      com.centurylinklabs.watchtower.enable: 'true'
      homepage.container: grafana
      homepage.description: Graphs
      homepage.group: Smarthome
      homepage.href: https://g.sectorq.eu
      homepage.icon: grafana.png
      homepage.name: Grafana
      homepage.server: my-docker
      homepage.weight: '1'
      wud.watch: true
      wud.watch.digest: true
    networks:
    - loki
    ports:
    - 3007:3000
    restart: ${RESTART:-unless-stopped}
    user: 0:0
    volumes:
    - /share/docker_data/grafana/data:/var/lib/grafana
    - /share/docker_data/grafana/certs:/certs
  loki:
    command: -config.file=/etc/loki/local-config.yaml
    image: ${DOCKER_REGISTRY:-}grafana/loki:latest
    labels:
      wud.watch: true
      wud.watch.digest: true
    networks:
      - loki
    ports:
      - 3100:3100
    restart: ${RESTART:-unless-stopped}
  promtail:
    command: -config.file=/etc/promtail/config.yml
    image: ${DOCKER_REGISTRY:-}grafana/promtail:latest
    labels:
      wud.watch: true
      wud.watch.digest: true
    networks:
      - loki
    volumes:
      - /var/log:/var/log
      - /share/docker_data/grafana/promtail/config.yml:/etc/promtail/config.yml
      - /share/Data/__GITLAB/omv_backup/:/share/Data/__GITLAB/omv_backup/
    restart: ${RESTART:-unless-stopped}
  renderer:
    image: ${DOCKER_REGISTRY:-}grafana/grafana-image-renderer:latest
    labels:
      com.centurylinklabs.watchtower.enable: 'true'
      homepage.container: music-assistant-server
      homepage.description: Music assistant
      homepage.group: Smarthome
      homepage.href: http://192.168.77.101:8095
      homepage.icon: music-assistant.png
      homepage.name: Music Assistant
      homepage.server: my-docker
      homepage.weight: '1'
      wud.watch: true
      wud.watch.digest: true
    ports:
    - 8092
    restart: ${RESTART:-unless-stopped}