version: '3.7'

networks:
  hostlan:
    driver: macvlan
    driver_opts:
      parent: enp3s0
    ipam:
      config:
        - subnet: 10.144.1.0/24

services:
  portainer:
    stdin_open: true
    tty: true
    read_only: true
    pids_limit: 4096
    mem_limit: 4g
    cpus: 2
    cpu_shares: 1024
    image: portainer/portainer-ce:latest
    healthcheck:
      disable: true
    container_name: portainer
    restart: on-failure:5
    security_opt:
      - no-new-privileges:true
    dns: 10.144.1.11
    networks:
      hostlan:
        ipv4_address: 10.144.1.30
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /mnt/dane/docker-data/docker-compose:/data:rw
    ports:
      - "2001:9443"
    command:
      --ssl
      --sslcert /data/certs/cert.pem
      --sslkey /data/certs/key.pem

  esphome:
    image: esphome/esphome:latest
    container_name: esphome
    stop_signal: SIGINT
    volumes:
      - /mnt/dane/docker-data/esphome/config:/config:rw
    dns: 10.144.1.11
    networks:
      hostlan:
        ipv4_address: 10.144.1.31
    restart: unless-stopped

  homeassistant:
    image: homeassistant/home-assistant:stable
    container_name: homeassistant
    volumes:
      - /mnt/dane/docker-data/homeassistant/config:/config
    dns: 10.144.1.11
    networks:
      hostlan:
        ipv4_address: '10.144.1.32'
    restart: unless-stopped