services:
  # ============================================================
  # DIUN - Docker Image Update Notifier (compute6)
  # ============================================================
  # Mirrors the node01/02 pattern (crazymax/diun) to close the compute6
  # image-update visibility gap. Watches compute6's local containers via the
  # docker socket; notifies the same HA webhook -> mobile_app_tomcell.
  # No traefik_public here (doesn't exist on compute6) -> default bridge;
  # Diun needs only the socket + outbound to registries and .100:8123.
  # ============================================================
  diun:
    image: crazymax/diun:latest
    container_name: diun
    restart: unless-stopped
    mem_limit: 256m
    cpus: 0.5
    environment:
      - TZ=America/Chicago
      - LOG_LEVEL=info
      - LOG_JSON=false
      - DIUN_WATCH_WORKERS=20
      - DIUN_WATCH_SCHEDULE=0 8 * * *
      - DIUN_WATCH_FIRSTCHECKNOTIF=false
      - DIUN_PROVIDERS_DOCKER=true
      - DIUN_PROVIDERS_DOCKER_WATCHBYDEFAULT=true
      - DIUN_NOTIF_WEBHOOK_ENDPOINT=http://192.168.99.100:8123/api/webhook/diun_image_update
      - DIUN_NOTIF_WEBHOOK_METHOD=POST
      - DIUN_NOTIF_WEBHOOK_HEADERS_CONTENT-TYPE=application/json
    security_opt:
      - apparmor=unconfined
    volumes:
      - ./data:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro