docker-compose.yml

version: '3.7'

services:
  mqtt:
    image: eclipse-mosquitto
    restart: unless-stopped
    user: '114:118'
    healthcheck:
      test: ["CMD", "mosquitto_sub", "-p", "1880", "-t", "$$SYS/#", "-C", "1", "-i", "healthcheck", "-W", "3"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 10s
    ports:
      - 1883:1883
      - 8883:8883
    volumes:
      - ./mqtt/mosquitto.conf:/mosquitto/config/mosquitto.conf:ro
      - ./mqtt/log:/mosquitto/log
      - ./mqtt/data:/mosquitto/data
      - ./ssl/certs:/mosquitto/config/certs:ro
      - ./ssl/private/mqtt.singularity.net.key:/mosquitto/config/private/mqtt.singularity.net.key:ro
  database:
    image: library/postgres:14
    restart: unless-stopped
    user: '114:118'
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./postgres/data:/var/lib/postgresql/data
    env_file:
      - ./postgres/secrets.env
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER"]
      interval: 10s
      timeout: 5s
      retries: 5
  adbd:
    image: sorccu/adb:latest
    restart: unless-stopped
    volumes:
      - ./adb:/root/.android
    command: /root/.android/startup.sh
  zwavejs2mqtt:
    image: zwavejs/zwave-js-ui:latest
    restart: unless-stopped
    tty: true
    stop_signal: SIGINT
    healthcheck:
      test: |
        wget --no-verbose --tries=1 --spider localhost:8091/health/zwave --header "Accept: text/plain" || exit 1
      interval: 30s
      timeout: 5s
      retries: 5
    environment:
      - TZ=America/New_York
    env_file:
      - ./zwave/secrets.env
    devices:
      - /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_C0F00963-if00-port0:/dev/zwave
    volumes:
      - ./zwave/config:/usr/src/app/store
    ports:
      - 8091:8091
  esphome:
    image: esphome/esphome
    restart: unless-stopped
    networks:
      default:
      macvlan:
        ipv4_address: 192.168.0.61
      traefik:
    volumes:
      - ./esphome:/config
    labels:
      traefik.enable: true
      traefik.http.routers.esphome.rule: "Host(`esphome.home.jeffalwilson.com`)"
      traefik.http.routers.esphome.middlewares: traefik-forward-auth
      traefik.http.routers.esphome.service: esphome
      traefik.http.services.esphome.loadbalancer.server.port: 80
    command:
      dashboard --port 80 /config
  matter-server:
    image: ghcr.io/home-assistant-libs/python-matter-server:stable
    container_name: matter-server
    restart: unless-stopped
    networks:
      default:
      macvlan:
        ipv4_address: 192.168.0.62
    security_opt:
      # Needed for Bluetooth via dbus
      - apparmor:unconfined
    volumes:
      - ./matter:/data/
      - /run/dbus:/run/dbus:ro
  homeassistant:
    image: homeassistant/home-assistant:stable
    init: true
    depends_on:
      database:
        condition: service_healthy
        restart: true
      mqtt:
        condition: service_healthy
      adbd:
        condition: service_started
      zwavejs2mqtt:
        condition: service_healthy
      matter-server:
        condition: service_started
    links:
      - mqtt
      - mqtt:mqtt.singularity.net
      - database
      - adbd
      - zwavejs2mqtt
      - matter-server:matter
    restart: unless-stopped
    user: '0:118'
    networks:
      default:
      macvlan:
        ipv4_address: 192.168.0.60
      traefik:
    devices:
      - /dev/serial/by-id/usb-Silicon_Labs_HubZ_Smart_Home_Controller_C0F00963-if01-port0:/dev/zigbee
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ./homeassistant:/config
      - ./tools:/opt/tools:ro
      - ./ssl/certs:/config/certs:ro
      - ./.ssh:/config/.ssh:ro
      - /run/dbus:/run/dbus:ro
    environment:
      - PUID=114
      - PGID=118
      - UMASK=007
      - HA_LOG_LEVEL=warning
      - TZ=America/New_York
    labels:
      traefik.enable: true
      traefik.http.routers.homeassistant.rule: "Host(`homeassistant.jeffalwilson.com`)"
      traefik.http.routers.homeassistant.entrypoints: web,websecure
      traefik.http.routers.homeassistant.tls: true
      traefik.http.routers.homeassistant.tls.certresolver: production
      traefik.http.routers.homeassistant.service: homeassistant
      traefik.http.services.homeassistant.loadbalancer.server.port: 8123
    entrypoint:
      - '/opt/tools/wait-for-it/wait-for-it.sh'
      - '-s'
      - 'mqtt:1883'
      - '--'
      - '/opt/tools/wait-for-it/wait-for-it.sh'
      - '-s'
      - 'database:5432'
      - '--'
      - '/opt/tools/wait-for-it/wait-for-it.sh'
      - '-s'
      - 'zwavejs2mqtt:3000'
      - '--'
      - 'python'
      - '-m'
      - 'homeassistant'
      - '--config'
      - '/config'
networks:
  traefik:
    external: true
    name: traefik
  macvlan:
    external: true
    name: HomeNetworkIPv6