MyTube

# Default two-container deployment
# Usage: docker compose -f stacks/docker-compose.yml up -d

services:
  backend:
    image: franklioxygen/mytube:backend-latest
    pull_policy: always
    container_name: mytube-backend
    volumes:
      - /share/CACHEDEV2_DATA/Medias/MyTube/uploads:/app/uploads
      - /share/CACHEDEV2_DATA/Medias/MyTube/data:/app/data
    environment:
      - PORT=5551
      # Optional: match the backend process uid/gid to the host-side file ownership.
      - PUID=${PUID:-1000}
      - PGID=${PGID:-1000}
      # Set to 0 to disable the startup chown pass for bind-mounted data/uploads.
      - MYTUBE_AUTO_FIX_PERMISSIONS=${MYTUBE_AUTO_FIX_PERMISSIONS:-1}
      # Optional: declare the admin trust boundary for this deployment.
      # Valid values: application | container | host
      # Docs: documents/en/deployment-security-model.md
      - MYTUBE_ADMIN_TRUST_LEVEL=container
    restart: unless-stopped
    networks:
      - mytube-network
    # Avoid Chromium/Puppeteer stalls on hosts with half-enabled IPv6.
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=1
      - net.ipv6.conf.default.disable_ipv6=1
    # For OpenWrt/iStoreOS systems where bridge network cannot access internet,
    # prefer stacks/docker-compose.host-network.yml. If adapting this file
    # manually, remove the backend networks and sysctls blocks before enabling
    # host networking; Docker rejects net.* sysctls with network_mode: host.
    # network_mode: host
    # Then set NGINX_BACKEND_URL=http://localhost:5551 for frontend service

  frontend:
    image: franklioxygen/mytube:frontend-latest
    pull_policy: always
    container_name: mytube-frontend
    ports:
      - "5556:5556"
    environment:
      # For internal container communication, use the service name
      # These will be replaced at runtime by the entrypoint script
      - VITE_API_URL=/api
      - VITE_BACKEND_URL=
      # For QNAP or other environments where service discovery doesn't work,
      # you can override these values using a .env file with:
      # - API_HOST=your-ip-or-hostname
      # - API_PORT=5551
      # For host network mode (when backend uses network_mode: host), set:
      # - NGINX_BACKEND_URL=http://localhost:5551
    depends_on:
      - backend
    restart: unless-stopped
    networks:
      - mytube-network
    # If backend uses host network mode, uncomment the following:
    # network_mode: host
    # And remove the ports mapping above

volumes:
  backend-data:
    driver: local

networks:
  mytube-network:
    driver: bridge
    # DNS configuration to help with network connectivity issues on OpenWrt/iStoreOS
    # If you still have issues accessing internet from containers, try:
    # 1. Add your router's DNS servers: dns: [8.8.8.8, 8.8.4.4]
    # 2. Or use host network mode for backend (see comments above)
    driver_opts:
      com.docker.network.bridge.enable_ip_masquerade: "true"
      com.docker.network.bridge.enable_icc: "true"