Files

109 lines
2.6 KiB
YAML

name: immich
services:
immich-server:
image: ghcr.io/immich-app/immich-server:${IMMICH_VERSION:-release}
container_name: immich-server
depends_on:
- database
- redis
volumes:
- ${UPLOAD_LOCATION}:/data
- /etc/localtime:/etc/localtime:ro
# External librariey
- type: bind
source: /mnt/toshiba/media-library
target: /external/toshiba
bind:
create_host_path: false
env_file:
- .env
networks:
- default
- proxy
restart: unless-stopped
healthcheck:
disable: false
deploy:
resources:
limits:
cpus: "3.0"
memory: 4G
reservations:
cpus: "0.5"
memory: 512M
devices:
- /dev/dri:/dev/dri
security_opt:
- no-new-privileges:true
immich-machine-learning:
image: ghcr.io/immich-app/immich-machine-learning:${IMMICH_VERSION:-release}
container_name: immich-machine-learning
volumes:
- /srv/fast/immich/model-cache:/cache
env_file:
- .env
restart: unless-stopped
healthcheck:
disable: false
cap_drop:
- ALL
deploy:
resources:
limits:
cpus: "2.0"
memory: 4G
security_opt:
- no-new-privileges:true
database:
image: ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0@sha256:bcf63357191b76a916ae5eb93464d65c07511da41e3bf7a8416db519b40b1c23
container_name: immich-postgres
volumes:
- ${DB_DATA_LOCATION}:/var/lib/postgresql/data
environment:
POSTGRES_PASSWORD: ${DB_PASSWORD}
POSTGRES_USER: ${DB_USERNAME}
POSTGRES_DB: ${DB_DATABASE_NAME}
POSTGRES_INITDB_ARGS: --data-checksums
ports:
- "127.0.0.1:5432:5432"
restart: unless-stopped
healthcheck:
disable: false
deploy:
resources:
limits:
cpus: "1.0"
memory: 1G
reservations:
cpus: "0.2"
memory: 128M
security_opt:
- no-new-privileges:true
shm_size: 128mb
redis:
image: docker.io/valkey/valkey:9@sha256:c123e3715db63d06d4ad6964884037aa0d5d4d703939b9929954112889708e1d
container_name: immich-redis
restart: unless-stopped
healthcheck:
test: redis-cli ping || exit 1
cap_add:
- CHOWN
- SETGID
- SETUID
# The official image starts as root and drops to the valkey user.
cap_drop:
- ALL
deploy:
resources:
limits:
cpus: "0.5"
memory: 512M
reservations:
cpus: "0.1"
memory: 64M
security_opt:
- no-new-privileges:true
networks:
proxy:
external: true