app:
  id: immich-postgres
  name: Immich Postgres
  version: "14-vectorchord0.4.3-pgvectors0.2.0"
  description: Postgres (pgvecto.rs / vectorchord) backend for Immich.

  # The Immich server connects via DB_HOSTNAME=immich_postgres, so the container
  # name (and thus its archy-net alias) must be the underscore form.
  extensions:
    container_name: immich_postgres

  container:
    image: 146.59.87.168:3000/lfg2025/immich-postgres:14-vectorchord0.4.3-pgvectors0.2.0
    pull_policy: if-not-present
    network: archy-net
    generated_secrets:
      - name: immich-db-password
        kind: hex32
    secret_env:
      - key: POSTGRES_PASSWORD
        secret_file: immich-db-password

  dependencies:
    - storage: 40Gi

  resources:
    memory_limit: 2Gi
    disk_limit: 40Gi

  security:
    capabilities: [CHOWN, DAC_OVERRIDE, FOWNER, SETGID, SETUID]
    readonly_root: false
    network_policy: isolated

  ports: []

  volumes:
    - type: bind
      source: /var/lib/archipelago/immich-db
      target: /var/lib/postgresql/data
      options: [rw]

  environment:
    - POSTGRES_USER=postgres
    - POSTGRES_DB=immich

  health_check:
    type: tcp
    endpoint: localhost:5432
    interval: 30s
    timeout: 5s
    retries: 3