version: '3.8'
services:
  netdata:
    image: netdata/netdata
    container_name: netdata
    hostname: ${HOST_NETDATA}.${DOMAIN}
    expose:
      - 19999
    restart: unless-stopped
    cap_add:
      - SYS_PTRACE
    security_opt:
      - apparmor:unconfined
    environment:
      - DOCKER_HOST=docker-proxy:2375      
    volumes:
      - netdataconfig:/etc/netdata
      - netdatalib:/var/lib/netdata
      - netdatacache:/var/cache/netdata
      - /etc/passwd:/host/etc/passwd:ro
      - /etc/group:/host/etc/group:ro
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /etc/os-release:/host/etc/os-release:ro
    networks:
      - netdata-frontend
      - netdata-backend       
    labels:
      - traefik.enable=true
      - traefik.http.routers.netdata.rule=Host(`${HOST_NETDATA}.${DOMAIN}`)
      - traefik.http.routers.netdata.entrypoints=https
      - traefik.http.routers.netdata.tls=true
      - traefik.http.routers.netdata.middlewares=auth
      - traefik.http.middlewares.auth.basicauth.users=${BASIC_AUTH}
      - traefik.docker.network=netdata-frontend
    healthcheck:
      disable: true
  docker-proxy:
    image: tecnativa/docker-socket-proxy
    container_name: docker-proxy
    volumes:
     - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - CONTAINERS=1
    networks:
      - netdata-backend 

networks:
  netdata-frontend:
    name: netdata-frontend
  netdata-backend:
    name: netdata-backend

volumes:
  netdataconfig:
  netdatalib:
  netdatacache: