services:
  unifi-controller:
    image: linuxserver/unifi-network-application:latest
    restart: unless-stopped
    ports:
      - "8080:8080"      # Device communication
      - "8443:8443"      # Controller GUI / API
      - "3478:3478/udp"  # STUN
      - "10001:10001/udp" # AP discovery
      - "8880:8880"      # HTTP portal redirect (guest hotspot)
      - "8843:8843"      # HTTPS portal redirect (guest hotspot)
      - "6789:6789"      # Mobile speed test (optional)
    environment:
      - PUID=1000
      - PGID=100
      - TZ=Europe/Amsterdam
      - MONGO_USER=unifi
      - MONGO_PASS=unifi
      - MONGO_HOST=unifi-db
      - MONGO_PORT=27017
      - MONGO_DBNAME=unifi
      - MONGO_AUTHSOURCE=admin
    volumes:
      - {{ unifi_network_application_data_dir }}/data:/config
    depends_on:
      - unifi-db
    networks:
      - unifi-network
      - caddy_network
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=1

  unifi-db:
    image: mongo:6.0
    restart: unless-stopped
    volumes:
      - {{ unifi_network_application_data_dir }}/db:/data/db
      - {{ unifi_network_application_data_dir }}/init-mongo.sh:/docker-entrypoint-initdb.d/init-mongo.sh:ro
    environment:
      - MONGO_INITDB_ROOT_USERNAME=root
      - MONGO_INITDB_ROOT_PASSWORD=root
      - MONGO_INITDB_DATABASE=unifi
      - MONGO_USER=unifi
      - MONGO_PASS=unifi
      - MONGO_DBNAME=unifi
      - MONGO_AUTHSOURCE=admin
    networks:
      - unifi-network
    sysctls:
      - net.ipv6.conf.all.disable_ipv6=1

networks:
  unifi-network:
    driver: bridge
  caddy_network:
    external: true
    name: caddy_default