version: '3'

services:
  filebrowser:
    image: filebrowser/filebrowser:latest
    container_name: filebrowser
    user: "501:20"  # Run as sammacmini:staff to match host permissions
    healthcheck:
      test: ["CMD", "wget", "--spider", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    ports:
      - "8833:8080"
    volumes:
      - /Volumes/SamMgmt/Containers/FileBrowser/config:/config
      - type: bind
        source: "/Volumes/Sam Storage"
        target: "/data/Sam Storage"
      - type: bind
        source: "/Volumes/SamMgmt"
        target: "/data/SamMgmt"
      - type: bind
        source: "/Volumes/SamCloud Prod"
        target: "/data/SamCloud Prod"
      - type: bind
        source: /Users/sammacmini
        target: /data/sammacmini
      - /Volumes/SamMgmt/Containers/FileBrowser/branding:/branding
    environment:
      - FB_CONFIG=/config/filebrowser.json  # Use our custom config file
      - PUID=501  # sammacmini user ID
      - PGID=20   # staff group ID
    ulimits:
      nofile:
        soft: 1048576
        hard: 1048576
    restart: unless-stopped
    privileged: true  # Give extended privileges to the container
    security_opt:
      - apparmor:unconfined
      - seccomp:unconfined
    networks:
      - npm_network

networks:
  npm_network:
    external: true