version: '3.8'

services:
  mosquitto:
    image: eclipse-mosquitto:2
    container_name: mosquitto
    ports:
      - "1883:1883"
      - "9001:9001"
    restart: unless-stopped

version: '3.8'

services:

  # --- INIT CONTAINER ---
  # This tiny container runs once at startup to create the Prometheus
  # configuration file. It writes the config into a shared volume,
  # then exits. This is needed because Prometheus needs a config file
  # to know which services to monitor (called "scrape targets").
  prometheus-init:
    image: busybox:latest              # Minimal Linux image (~1MB), used only to write a file
    container_name: prometheus-init
    volumes:
      - prometheus_config:/config      # Shared volume where the config file will be written
    entrypoint: ["/bin/sh", "-c"]      # Run a shell command
    command:
      - |
        cat > /config/prometheus.yml << 'EOF'
        global:
          scrape_interval: 5s          # How often Prometheus collects metrics (every 5 seconds)
        scrape_configs:
          - job_name: prometheus        # Prometheus monitors itself
            static_configs:
              - targets: ['localhost:9090']
          - job_name: node_exporter     # Node Exporter provides device metrics (CPU, RAM, disk, etc.)
            static_configs:
              - targets: ['node-exporter:9100']
        EOF
    restart: "no"                      # Run only once, do not restart after exiting

  # --- PROMETHEUS ---
  # The metrics database. It periodically collects (scrapes) metrics
  # from the targets defined in the config file, stores them, and
  # provides a web UI to query and graph them.
  # Web UI available at: http://<device-ip>:9090
  prometheus:
    image: prom/prometheus:latest
    container_name: prometheus
    depends_on:
      prometheus-init:
        condition: service_completed_successfully  # Wait for the config file to be created first
    ports:
      - "9090:9090"                    # Expose Prometheus web UI on port 9090
    command:
      - --config.file=/config/prometheus.yml       # Path to the config created by the init container
      - --storage.tsdb.path=/prometheus            # Where to store collected metrics data
      - --web.listen-address=0.0.0.0:9090          # Listen on all network interfaces
    volumes:
      - prometheus_data:/prometheus                 # Persistent storage for metrics history
      - prometheus_config:/config:ro                # Read the config file (read-only)
    restart: unless-stopped            # Auto-restart unless manually stopped

  # --- NODE EXPORTER ---
  # A lightweight agent that reads system metrics from the device
  # (CPU usage, RAM, disk space, network traffic, etc.) and exposes
  # them on port 9100 for Prometheus to collect.
  # Raw metrics visible at: http://<device-ip>:9100/metrics
  node-exporter:
    image: prom/node-exporter:latest
    container_name: node-exporter
    ports:
      - "9100:9100"                    # Expose metrics endpoint on port 9100
    restart: unless-stopped

# --- VOLUMES ---
# Named volumes persist data across container restarts and recreations.
volumes:
  prometheus_data:                     # Stores Prometheus metrics history
  prometheus_config:                   # Stores the generated config file

100 - (avg by (instance) (irate(node_cpu_seconds_total{mode="idle"}[5m])) * 100)

(1 - (node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes)) * 100

services:
  postgres:
    image: docker.io/postgres:16-alpine
    container_name: guac-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: ${POSTGRES_DB}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./init:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}"]
      interval: 10s
      timeout: 5s
      retries: 10

  guacd:
    image: docker.io/guacamole/guacd:1.6.0
    container_name: guac-guacd
    restart: unless-stopped

  guacamole:
    image: docker.io/guacamole/guacamole:1.6.0
    container_name: guac-web
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      guacd:
        condition: service_started
    environment:
      GUACD_HOSTNAME: guacd
      POSTGRESQL_HOSTNAME: postgres
      POSTGRESQL_PORT: 5432
      POSTGRESQL_DATABASE: ${POSTGRES_DB}
      POSTGRESQL_USER: ${POSTGRES_USER}
      POSTGRESQL_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRESQL_AUTO_CREATE_ACCOUNTS: "true"
    ports:
      - "8080:8080"

volumes:
  postgres_data:

POSTGRES_DB=guacamole_db
POSTGRES_USER=guacamole_user
POSTGRES_PASSWORD=YourSecurePassword