# Scrutiny — SMART disk health monitoring with historical trending.
#
# Omnibus image bundles the web UI, InfluxDB and the metrics collector in one
# container, which suits a single host.
#
# Needs raw device access: SYS_RAWIO for SMART ioctls on the SATA disks, and
# SYS_ADMIN additionally for NVMe. /run/udev is mounted read-only so scrutiny
# can resolve device metadata (model, serial, WWN).
#
# Devices listed explicitly rather than using privileged mode:
#   sda-sdd   4x WDC WD40EFPX  (4TB)
#   sde-sdg   3x TOSHIBA MG08ACA14TE (14TB)
#   sdh       1x WUH721414ALE601 (14TB)
#   nvme0n1   WDS100T3X0C (1TB)
#   nvme1n1   Samsung 990 PRO 2TB  (root/LUKS)
# sdi (USB Mass Storage) is deliberately omitted.
#
# If a disk is added or replaced, add it to the devices: list and recreate.

networks:
  nginx-bridge:
    external: true

services:
  scrutiny:
    image: ghcr.io/analogj/scrutiny:master-omnibus
    container_name: scrutiny
    hostname: scrutiny
    domainname: scrutiny.gbrown.org
    networks: ['nginx-bridge']
    #ports:
      #- "8080:8080"
    environment:
      - TZ=America/New_York
      - SCRUTINY_WEB_INFLUXDB_RETENTION_POLICY=true
    cap_add:
      - SYS_RAWIO
      - SYS_ADMIN
    devices:
      - /dev/sda:/dev/sda
      - /dev/sdb:/dev/sdb
      - /dev/sdc:/dev/sdc
      - /dev/sdd:/dev/sdd
      - /dev/sde:/dev/sde
      - /dev/sdf:/dev/sdf
      - /dev/sdg:/dev/sdg
      - /dev/sdh:/dev/sdh
      - /dev/nvme0n1:/dev/nvme0n1
      - /dev/nvme1n1:/dev/nvme1n1
    labels:
      com.centurylinklabs.watchtower.enable: "true"
    volumes:
      - ./volumes/config:/opt/scrutiny/config
      - ./volumes/influxdb:/opt/scrutiny/influxdb
      - /run/udev:/run/udev:ro
      - /etc/localtime:/etc/localtime:ro
    tty: true
    stdin_open: true
    restart: unless-stopped