version: "3.9"

services:
  netdata:
    image: netdata/netdata:latest
    container_name: netdata
    restart: unless-stopped

    # Netdata UI
    ports:
      - "19999:19999"

    # Needed so Netdata can see host processes
    pid: host

    cap_add:
      - SYS_PTRACE
    security_opt:
      - apparmor=unconfined

    volumes:
      # Netdata state + config
      - netdataconfig:/etc/netdata
      - netdatalib:/var/lib/netdata
      - netdatacache:/var/cache/netdata

      # Required host mounts
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /etc/os-release:/host/etc/os-release:ro
      - /etc/passwd:/host/etc/passwd:ro
      - /etc/group:/host/etc/group:ro

      # Optional: monitor Docker containers too
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /var/lib/docker:/var/lib/docker:ro

volumes:
  netdataconfig: {}
  netdatalib: {}
  netdatacache: {}