ChristianLempa_Boilerplates/library/compose/checkmk/compose.yaml.j2

services:
  {{ service_name }}:
    image: checkmk/check-mk-raw:2.4.0-{{ monitoring_version }}
    container_name: {{ container_name }}
    {#
      Set container hostname for Checkmk identification
    #}
    hostname: {{ container_hostname }}
    {#
      Environment variables for Checkmk configuration:
      - TZ: Timezone for proper log timestamps
      - CMK_PASSWORD: Admin password for web interface
      - CMK_SITE_ID: Site identifier for Checkmk instance
    #}
    environment:
      - TZ={{ container_timezone }}
      - CMK_PASSWORD={{ cmk_password }}
      - CMK_SITE_ID={{ cmk_site_id }}
    {#
      Temporary filesystem for Checkmk runtime files
    #}
    tmpfs:
      - /opt/omd/sites/{{ cmk_site_id }}/tmp:uid={{ user_uid }},gid={{ user_gid }}
    {#
      Volume configuration:
      - /etc/localtime: System time synchronization
      - data: Persistent storage for Checkmk sites and configuration
    #}
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - data:/omd/sites:rw
    {#
      When traefik is enabled, add traefik network for reverse proxy access
    #}
    {% if traefik_enabled %}
    networks:
      {{ traefik_network }}:
    {% endif %}
    {#
      Port mappings (only when Traefik is disabled):
      - HTTP: Web interface
      - Agent: Checkmk agent communication
      - SNMP: SNMP trap receiver
    #}
    {% if not traefik_enabled %}
    ports:
      - "{{ ports_http }}:8000"
      - "{{ ports_agent }}:5000"
      - "{{ ports_snmp }}:162/udp"
    {% endif %}
    {#
      When traefik_enabled is set, add traefik labels
      (optionally enable TLS if traefik_tls_enabled is set)
    #}
    {% if traefik_enabled %}
    labels:
      - traefik.enable=true
      - traefik.docker.network={{ traefik_network }}
      - traefik.http.services.{{ service_name }}-web.loadBalancer.server.port=5000
      - traefik.http.services.{{ service_name }}-web.loadBalancer.server.scheme=http
      - traefik.http.routers.{{ service_name }}-http.service={{ service_name }}-web
      - traefik.http.routers.{{ service_name }}-http.rule=Host(`{{ traefik_host }}.{{ traefik_domain }}`)
      - traefik.http.routers.{{ service_name }}-http.entrypoints={{ traefik_entrypoint }}
      {% if traefik_tls_enabled %}
      - traefik.http.routers.{{ service_name }}-https.service={{ service_name }}-web
      - traefik.http.routers.{{ service_name }}-https.rule=Host(`{{ traefik_host }}.{{ traefik_domain }}`)
      - traefik.http.routers.{{ service_name }}-https.entrypoints={{ traefik_tls_entrypoint }}
      - traefik.http.routers.{{ service_name }}-https.tls=true
      - traefik.http.routers.{{ service_name }}-https.tls.certresolver={{ traefik_tls_certresolver }}
      {% endif %}
    {% endif %}
    restart: {{ restart_policy }}

{#
  Volume definitions:
  - data: Persistent storage for Checkmk sites and configuration
#}
volumes:
  data:
    driver: local

{#
  Network definitions (only when Traefik is enabled):
  - Traefik network: always external (managed by Traefik)
#}
{% if traefik_enabled %}
networks:
  {{ traefik_network }}:
    external: true
{% endif %}