services:
  grafana:
    mem_limit: 768m
    memswap_limit: 1.5g
    image: grafana/grafana-enterprise
    container_name: grafana
    restart: unless-stopped
    volumes:
      - /srv/appdata/grafana/data:/var/lib/grafana
 #   ports:
#     - '3000:3000'
    environment:
      - GF_SECURITY_ALLOW_EMBEDDING=true
      - GF_SECURITY_COOKIE_SAMESITE=none
      - GF_SECURITY_COOKIE_SECURE=true
      - GF_SECURITY_CONTENT_SECURITY_POLICY=true
      - GF_SECURITY_CONTENT_SECURITY_POLICY_TEMPLATE=frame-ancestors *.lan 'self';
      - GF_AUTH_ANONYMOUS_ENABLED=true          # optional but makes embedding painless
      - GF_AUTH_ANONYMOUS_ORG_ROLE=Viewer
    networks:
      npm_proxy:
        ipv4_address: 192.168.96.13

networks:
  npm_proxy:
    external: true