networks:
  monitoring:
    external: false

services:
  prometheus:
    image: docker.io/prom/prometheus
    container_name: prometheus
    restart: unless-stopped
    ports:
      - '9090:9090'
    volumes:
      - prometheus-data:/prometheus
      - /opt/monitoring/prometheus.yml:/etc/prometheus/prometheus.yml
    networks:
      - monitoring

  grafana:
    image: docker.io/grafana/grafana
    container_name: grafana
    restart: unless-stopped
    ports:
      - '4000:4000'
    volumes:
      - grafana-storage:/var/lib/grafana
    environment:
      - GF_SECURITY_SECRET_KEY={{ grafana_secret }}
      - GF_SERVER_DOMAIN=grafana.secretbee.buzz
      - GF_SERVER_ROOT_URL=https://grafana.secretbee.buzz/
      - GF_SERVER_HTTP_PORT=4000
      - GF_SERVER_PROTOCOL=HTTP
    networks:
      - monitoring