---
version: '3.7'
services:
  grafana:
    image: docker.io/grafana/grafana:9.2.2
    restart: always
    ports:
      - 127.0.0.1:3500:3000
    mem_limit: 128m
    volumes:
      - "grafana_data:/var/lib/grafana"
    environment:
      - GF_USERS_ALLOW_SIGN_UP=false
      - GF_AUTH_ANONYMOUS_ENABLED=true
      - GF_AUTH_ANONYMOUS_ORG_NAME=viewer_org
      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
      - GF_AUTH_BASIC_ENABLED=true
      # - GF_AUTH_DISABLE_LOGIN_FORM=false
      - GF_DEFAULT_INSTANCE_NAME=nebula
      - GF_SERVER_DOMAIN=grafana.dotya.ml
      - GF_ROOT_URL=/
      - GF_SECURITY_COOKIE_SECURE=true
      - GF_ANALYTICS_REPORTING_ENABLED=false
      - GF_SECURITY_ADMIN_PASSWORD=$GF_ADMIN_PASSWORD
      - GF_ALLOWED_ORIGINS="https://*.dotya.ml"
    healthcheck:
      test: "/usr/bin/wget -q -Y off http://localhost:3000/api/health -O /dev/null > /dev/null 2>&1"
      interval: 10s
      retries: 20

volumes:
  grafana_data:
...