SparkyFitness

# SparkyFitness for FreeBSD (Daemonless)
# Copy to .env and edit.

# Timezone (TZ identifier)
TZ=UTC

# Where data lives on the host
UPLOADS_LOCATION=/containers/sparkyfitness/uploads
BACKUPS_LOCATION=/containers/sparkyfitness/backups
DB_DATA_LOCATION=/containers/sparkyfitness/postgres

# PostgreSQL superuser + database (provisioned by the sidecar)
SPARKY_FITNESS_DB_NAME=sparkyfitness
SPARKY_FITNESS_DB_USER=sparky
# Change this to a random password! A-Za-z0-9 only.
SPARKY_FITNESS_DB_PASSWORD=sparky

# Limited app role the backend creates during migrations
SPARKY_FITNESS_APP_DB_USER=sparky_app
SPARKY_FITNESS_APP_DB_PASSWORD=sparky_app

# Secrets: no defaults on purpose -- these become the catalog's install
# defaults, and a shipped value would be shared by every install. Generate
# your own, e.g. `openssl rand -hex 32` for each.
SPARKY_FITNESS_API_ENCRYPTION_KEY=
BETTER_AUTH_SECRET=

# Public URL the browser uses to reach the app, e.g. http://myhost:3004.
# No default on purpose: Better Auth compares this against the request origin
# and rejects the sign-up POST when it does not match, so a shipped default is
# wrong for everyone who does not browse from the server itself.
SPARKY_FITNESS_FRONTEND_URL=

name: sparkyfitness

services:
  sparkyfitness:
    # Tag in a ${VAR} so the catalog exposes it as an image_tag variable and the
    # install wizard can offer this repo's published versions. The database is
    # pinned deliberately: retagging it would be a destructive migration.
    image: ghcr.io/daemonless/sparkyfitness:${SPARKYFITNESS_TAG:-latest}
    container_name: sparkyfitness
    restart: unless-stopped
    network_mode: host
    depends_on:
      - sparkyfitness-db

    environment:
      - PUID=1000
      - PGID=1000
      - TZ=${TZ:-UTC}
      - NODE_ENV=production
      - SPARKY_FITNESS_DB_HOST=${SPARKY_FITNESS_DB_HOST:-127.0.0.1}
      - SPARKY_FITNESS_DB_PORT=5433
      - SPARKY_FITNESS_DB_NAME=${SPARKY_FITNESS_DB_NAME}
      - SPARKY_FITNESS_DB_USER=${SPARKY_FITNESS_DB_USER}
      - SPARKY_FITNESS_DB_PASSWORD=${SPARKY_FITNESS_DB_PASSWORD}
      - SPARKY_FITNESS_APP_DB_USER=${SPARKY_FITNESS_APP_DB_USER}
      - SPARKY_FITNESS_APP_DB_PASSWORD=${SPARKY_FITNESS_APP_DB_PASSWORD}
      - SPARKY_FITNESS_API_ENCRYPTION_KEY=${SPARKY_FITNESS_API_ENCRYPTION_KEY}
      - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET}
      - SPARKY_FITNESS_FRONTEND_URL=${SPARKY_FITNESS_FRONTEND_URL}
      - SPARKY_FITNESS_SERVER_HOST=127.0.0.1
      - SPARKY_FITNESS_SERVER_PORT=3010
      - SPARKY_FITNESS_LOG_LEVEL=ERROR

    volumes:
      - ${UPLOADS_LOCATION}:/app/server/uploads
      - ${BACKUPS_LOCATION}:/app/server/backup

  sparkyfitness-db:
    image: ghcr.io/daemonless/postgres:18
    container_name: sparkyfitness-db
    restart: unless-stopped
    network_mode: host

    annotations:
      org.freebsd.jail.allow.sysvipc: "true"

    # Generic daemonless PostgreSQL 18 image. Only the superuser role + database
    # are provisioned here; the SparkyFitness backend creates its own limited
    # app role (SPARKY_FITNESS_APP_DB_USER) during migrations.
    environment:
      - POSTGRES_DB=${SPARKY_FITNESS_DB_NAME}
      - POSTGRES_USER=${SPARKY_FITNESS_DB_USER}
      - POSTGRES_PASSWORD=${SPARKY_FITNESS_DB_PASSWORD}
      # Distinct port (NOT 5432) so this can run alongside another host-networked Postgres
      # (e.g. Immich on 5432) without colliding. ⚠ Requires the daemonless/postgres image to
      # honor POSTGRES_PORT — if it doesn't, it falls back to 5432 and WILL collide. Two
      # host-net Postgres must never share a port.
      - POSTGRES_PORT=5433

    volumes:
      - ${DB_DATA_LOCATION}:/var/lib/postgresql/data