kima-hub/docker-compose.server.yml at main · Chevron7Locked/kima-hub · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
# Kima Full Stack - Production Deployment
# Uses pre-built Kima image from DockerHub + all external services
#
# Usage:
#   docker compose -f docker-compose.server.yml up -d

services:
    # ==============================================================================
    # KIMA (All-in-One: Frontend + Backend + PostgreSQL + Redis)
    # ==============================================================================

    kima:
        image: chevron7locked/kima:latest
        container_name: kima
        ports:
            - "${FRONTEND_PORT:-3030}:3030"
        volumes:
            # IMPORTANT: CHANGE THIS to your music library path
            - ${MUSIC_PATH:-/path/to/your/music}:/music
            # Persistent data (database, cache, covers, etc.)
            - kima_data:/data
        environment:
            - TZ=${TZ:-America/Chicago}
            # Generate with: openssl rand -base64 32
            - SESSION_SECRET=${SESSION_SECRET:-changeme-generate-secure-key}
            # Lidarr webhook callback URL - how Lidarr reaches Kima when downloads complete
            # Default uses host.docker.internal which works on most setups with extra_hosts below
            # Override if using custom Docker networks: e.g., http://192.168.0.20:3030
            - KIMA_CALLBACK_URL=${KIMA_CALLBACK_URL:-http://host.docker.internal:3030}
            - DISABLE_CLAP=${DISABLE_CLAP:-}
        # Makes host.docker.internal work on Linux (already works on Docker Desktop)
        extra_hosts:
            - "host.docker.internal:host-gateway"
        # Cap memory to prevent host kernel OOM cascade from anon_vma_chain slab exhaustion.
        # Without this, the host kernel OOM killer fires when Next.js VMA chains accumulate.
        # 6g is enough for frontend + backend + embeddings + Redis + Postgres.
        mem_limit: 6g
        memswap_limit: 8g
        # Fix Redis memory overcommit warning
        sysctls:
            - vm.overcommit_memory=1
        restart: unless-stopped
        healthcheck:
            test: ["CMD", "node", "/app/healthcheck.js"]
            interval: 30s
            timeout: 10s
            retries: 3

    # ==============================================================================
    # EXTERNAL SERVICES (Music Management)
    # ==============================================================================

    # Lidarr - Music collection manager
    lidarr:
        image: lscr.io/linuxserver/lidarr:latest
        container_name: kima_lidarr
        environment:
            - PUID=${PUID:-1000}
            - PGID=${PGID:-1000}
            - TZ=${TZ:-UTC}
        volumes:
            - lidarr_config:/config
            - ${MUSIC_PATH:-./music}:/music
            - ${DOWNLOAD_PATH:-./downloads}:/downloads
        ports:
            - "8686:8686"
        restart: unless-stopped

    # Prowlarr - Indexer manager
    prowlarr:
        image: lscr.io/linuxserver/prowlarr:latest
        container_name: kima_prowlarr
        environment:
            - PUID=${PUID:-1000}
            - PGID=${PGID:-1000}
            - TZ=${TZ:-UTC}
        volumes:
            - prowlarr_config:/config
        ports:
            - "9696:9696"
        restart: unless-stopped

    # FlareSolverr - Cloudflare bypass for Prowlarr
    flaresolverr:
        image: ghcr.io/flaresolverr/flaresolverr:latest
        container_name: kima_flaresolverr
        environment:
            - LOG_LEVEL=${LOG_LEVEL:-info}
            - LOG_HTML=${LOG_HTML:-false}
            - CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
            - TZ=${TZ:-UTC}
        ports:
            - "8191:8191"
        restart: unless-stopped

    # qBittorrent - Torrent client
    qbittorrent:
        image: lscr.io/linuxserver/qbittorrent:latest
        container_name: kima_qbittorrent
        environment:
            - PUID=${PUID:-1000}
            - PGID=${PGID:-1000}
            - TZ=${TZ:-UTC}
            - WEBUI_PORT=8080
        volumes:
            - qbittorrent_config:/config
            - ${MUSIC_PATH:-./music}/torrents:/music/torrents
            - ${DOWNLOAD_PATH:-./downloads}:/downloads
        ports:
            - "8080:8080"
            - "6881:6881"
            - "6881:6881/udp"
        restart: unless-stopped

    # NZBGet - Usenet client
    nzbget:
        image: lscr.io/linuxserver/nzbget:latest
        container_name: kima_nzbget
        environment:
            - PUID=${PUID:-1000}
            - PGID=${PGID:-1000}
            - TZ=${TZ:-UTC}
        volumes:
            - nzbget_config:/config
            - ${MUSIC_PATH:-./music}/usenet:/music/usenet
            - ${DOWNLOAD_PATH:-./downloads}:/downloads
        ports:
            - "6789:6789"
        restart: unless-stopped

volumes:
    # Kima
    kima_data:
    # External services
    lidarr_config:
    prowlarr_config:
    qbittorrent_config:
    nzbget_config:

networks:
    default:
        name: kima_network