docker-compose.yml

services:
  ns-mongodb:
    image: 'mongo:6'
    restart: unless-stopped
    hostname: ns-mongodb
    container_name: ns-mongodb
    #user: "111:65534" # Define mongo UID and Nogroup GID on Debian (change to suit your OS)
    environment:
      - MONGO_INITDB_ROOT_USERNAME=admin
      - MONGO_INITDB_ROOT_PASSWORD=${MONGO_INITDB_ROOT_PASSWORD}
      - MONGO_INITDB_DATABASE=nightscout
    healthcheck:
      test: mongosh --eval 'db.adminCommand("ping")' --quiet
      interval: 30s
      retries: 5
      start_period: 5s
      timeout: 10s
    volumes:
      - "./mongodb/data/db/:/data/db"
    cap_add:
      - sys_nice
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  dev-ns-mongodb:
    image: 'mongo:6'
    restart: unless-stopped
    hostname: dev-ns-mongodb
    container_name: dev-ns-mongodb
    #user: "111:65534" # Define mongo UID and Nogroup GID on Debian (change to suit your OS)
    environment:
      - MONGO_INITDB_ROOT_USERNAME=admin
      - MONGO_INITDB_ROOT_PASSWORD=${DEV_MONGO_INITDB_ROOT_PASSWORD}
      - MONGO_INITDB_DATABASE=nightscout
    healthcheck:
      test: mongosh --eval 'db.adminCommand("ping")' --quiet
      interval: 30s
      retries: 5
      start_period: 5s
      timeout: 10s
    volumes:
      - "./dev-mongodb/data/db/:/data/db"
    cap_add:
      - sys_nice
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  nightscout:
    image: 'nightscout/cgm-remote-monitor:latest'
    hostname: nightscout
    container_name: nightscout
    restart: unless-stopped
    #user: "1000:1000" # define custom uid/gid to run Nightscout as this is a good idea, create a specific user for Nightscout and run as it
    environment:
      - TZ=${TZ}
      - 'MONGO_CONNECTION=mongodb://admin:${MONGO_INITDB_ROOT_PASSWORD}@ns-mongodb:27017/?tls=false&ssl=false&retryWrites=true&w=majority'
      - MONGODB_COLLECTION=entries
      - NODE_ENV=production
      - API_SECRET=${API_SECRET}
      - PORT=${PORT}
      - INSECURE_USE_HTTP=TRUE
      - DISPLAY_UNITS=mmol/L
      - ENABLE=careportal boluscalc food bwp cage sage iage iob cob basal dbsize pushover pump openaps
      - SHOW_FORECAST=openaps
      - PUMP_FIELDS=reservoir battery clock
      - BG_HIGH=12
      - BG_LOW=4.2
      - BG_TARGET_BOTTOM=4.4
      - BG_TARGET_TOP=10
      - CUSTOM_TITLE=${CUSTOM_TITLE}
      - THEME=colors
      - TIME_FORMAT=12
      - SECURE_HSTS_HEADER=FALSE
      - BASE_URL=${BASE_URL}
      - DEVICESTATUS_ADVANCED=TRUE
      - AUTH_DEFAULT_ROLES=readable
    healthcheck:
      test: wget -qO- http://nightscout:1337/api/v1/status.json |grep "\"status\":\"ok\""
      interval: 30s
      retries: 5
      start_period: 5s
      timeout: 10s
    depends_on:
      ns-mongodb:
        condition: service_healthy
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  dev-nightscout:
    image: 'nightscout/cgm-remote-monitor-development:latest' # Dev container
    #image: 'psonnera/cgm-remote-monitor:ai-report-plugin' # LLM report testing container
    hostname: dev-nightscout
    container_name: dev-nightscout
    restart: unless-stopped
    #user: "1000:1000" # define custom uid/gid to run Nightscout as this is a good idea, create a specific user for Nightscout and run as it
    environment:
      - TZ=${TZ}
      - 'MONGO_CONNECTION=mongodb://admin:${DEV_MONGO_INITDB_ROOT_PASSWORD}@dev-ns-mongodb:27017/?tls=false&ssl=false&retryWrites=true&w=majority'
      - MONGODB_COLLECTION=entries
      - NODE_ENV=production
      - API_SECRET=${API_SECRET}
      - PORT=${DEV_PORT}
      - INSECURE_USE_HTTP=TRUE
      - DISPLAY_UNITS=mmol/L
      - ENABLE=careportal boluscalc food bwp cage sage iage iob cob basal dbsize pushover pump openaps
      - SHOW_FORECAST=openaps
      - PUMP_FIELDS=reservoir battery clock
      - BG_HIGH=12
      - BG_LOW=4.2
      - BG_TARGET_BOTTOM=4.4
      - BG_TARGET_TOP=10
      - CUSTOM_TITLE=${DEV_CUSTOM_TITLE}
      - THEME=colors
      - TIME_FORMAT=12
      - SECURE_HSTS_HEADER=FALSE
      - BASE_URL=${DEV_BASE_URL}
      - DEVICESTATUS_ADVANCED=TRUE
      - AUTH_DEFAULT_ROLES=readable
      - AI_LLM_KEY=${AI_LLM_KEY}
      - AI_LLM_API_URL=https://api.anthropic.com/v1/messages
      - AI_LLM_MAX_TOKENS=512
      - AI_LLM_MODEL=claude-sonnet-4-5-20250929
      - AI_LLM_DEBUG=true
      - AI_LLM_1K_TOKEN_COSTS_INPUT=0.003 # Claude cost
      - AI_LLM_1K_TOKEN_COSTS_OUTPUT=0.015 # Claud cost
      - AI_LLM_MONTHLY_USD_LIMIT=10
    healthcheck:
      test: wget -qO- http://dev-nightscout:1338/api/v1/status.json |grep "\"status\":\"ok\""
      interval: 30s
      retries: 5
      start_period: 5s
      timeout: 10s
    depends_on:
      dev-ns-mongodb:
        condition: service_healthy
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  nginx:
    image: lscr.io/linuxserver/swag
    container_name: nginx
    hostname: nginx
    environment:
      - PUID=33 #www-data debian default uid / change to suit your system
      - PGID=33 #www-data debian defauil gid / change to suit your system
      - TZ=${TZ}
      - URL=${URL}
      - SUBDOMAINS=${SUBDOMAINS}
      - VALIDATION=${VALIDATION}
      - DNSPLUGIN=${DNSPLUGIN}
      - PROPAGATION=30
      #- DOCKER_MODS=linuxserver/mods:swag-dashboard #Uncomment if you want the dashboard
    volumes:
      - ./nginx_config:/config
    ports:
      - 80:80
      - 443:443
    restart: unless-stopped
    healthcheck:
      test: curl -v --fail https://nginx/index.html |grep "OK" || exit 1
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 20s
    depends_on:
      dev-ns-mongodb:
        condition: service_healthy
      ns-mongodb:
        condition: service_healthy
    labels:
      - "com.centurylinklabs.watchtower.enable=true"