networks:
  nginx-bridge:
    external: true
services:
  frigate:
    image: ghcr.io/blakeblackshear/frigate:0.17.1-tensorrt # For Nvidia GPU
    container_name: frigate
    hostname: frigate
    domainname: frigate.gbrown.org
    networks: [nginx-bridge]
    ports:
      #- "8971:8971"
      - "5000:5000"
      #- "8554:8554"
      #- "8555:8555"
    # Check host system's actual render/video/plugdev group IDs with 'getent group render', 'getent group video', and 'getent group plugdev'
    # Must add these exact IDs in container's group_add section or OpenVINO GPU acceleration will fail
    group_add:
      - "105" # render
      - "110" # render
      - "39"  # video
      - "46"  # plugdev
    shm_size: "256mb"
    env_file:
      - .env
    environment:
      - TZ=America/New_York
      - PGID=1000
      - PUID=1000
      - FRIGATE_RTSP_PASSWORD=${RTSP_PASSWORD}
      #- HSA_OVERRIDE_GFX_VERSION=11.0.0
      - PLUS_API_KEY=${PLUS_API_KEY}
    labels:
      com.centurylinklabs.watchtower.enable: "true"
    volumes:
      - ./volumes/frigate/config:/config:rw
      - ./volumes/frigate/data:/usr/local/nginx/conf:rw
      - /home/gib/Public/Server_Backup/frigate:/media/frigate
      - type: tmpfs
        target: /tmp/cache
        tmpfs:
          size: 1000000000
      - /etc/localtime:/etc/localtime:ro
      # - /dev/bus/usb:/dev/bus/usb # Uncomment for Google Coral USB
    devices:
      - /dev/dri:/dev/dri # for intel hwaccel, needs to be updated for your hardware
      #- /dev/kfd:/dev/kfd
    stop_grace_period: 30s
    restart: unless-stopped
    tty: true
    security_opt: ['seccomp:unconfined','label:disable','systempaths=unconfined']
    #privileged: true
    runtime: nvidia
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities: [gpu]

  mqtt:
    image: eclipse-mosquitto:2
    container_name: mqtt
    hostname: mqtt
    domainname: mqtt.gbrown.org
    networks: [nginx-bridge]
    ports: ["1883:1883"]
    #env_file: [.env]
    environment: [TZ=America/New_York]
    labels:
      com.centurylinklabs.watchtower.enable: "true"
    volumes:
      - ./volumes/mosquitto/config:/mosquitto/config:rw
      - ./volumes/mosquitto/data:/mosquitto/data:rw
      - ./volumes/mosquitto/log:/mosquitto/log:rw
    tty: true
    security_opt: ['seccomp:unconfined','label:disable','systempaths=unconfined']
    restart: unless-stopped