name: metafeederwikicommons

# =============================================================================
# MetaFeeder · Wikimedia Commons — open-licensed media for MetaMesh.
#
# Keyless: finds open-licensed images on Wikimedia Commons and returns the
# records to the MetaGateway core, which stores + announces them. Split out of
# the former MetaFeeder · Commons app (one provider per app).
#
# It needs, over the shared `pcs` network:
#   - the **MetaGateway** app — which must list this feeder's URL
#     (`http://metafeederwikicommons-feeder:8080`) in its feeders config so it gets discovered.
#     Discovery is startup-only, so restart the gateway afterwards.
#
# Everything is scoped under the `metafeederwikicommons-*` prefix + the per-stack `metafeederwikicommons` network +
# /DATA/AppData/metafeederwikicommons/ data root, so it installs beside the other Meta* apps with
# zero collisions.
# =============================================================================

services:
  # ---------------------------------------------------------------------------
  # metafeederwikicommons-feeder — the wikicommons feeder. Keyless; no config needed.
  # ---------------------------------------------------------------------------
  metafeederwikicommons-feeder:
    image: ghcr.io/worph/meta-feeder-wikicommons:1.0.0
    cpu_shares: 30
    container_name: metafeederwikicommons-feeder
    hostname: metafeederwikicommons-feeder
    restart: unless-stopped
    user: "0:0"
    expose:
      - 8080
    environment:
      RUST_LOG: "info,meta_feeder=info"
      META_FEEDER_STATE_DIR: "/data/meta-feeder"
      TZ: "$TZ"
    volumes:
      # Persist feeder config.json + redb cache so it survives recreate.
      - ${DATA_ROOT:-/DATA}/AppData/metafeederwikicommons/state:/data/meta-feeder:rw
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8080/health"]
      interval: 5s
      timeout: 3s
      retries: 10
      start_period: 5s
    networks:
      - metafeederwikicommons
      - pcs

  # ---------------------------------------------------------------------------
  # AppShield gate — the feeder's config page behind Yundera OIDC SSO.
  # container_name == subdomain prefix (the auth-registrar derives the client_id
  # from it). The gateway still reaches the feeder directly on `pcs`; index → /config.
  # ---------------------------------------------------------------------------
  metafeederwikicommons:
    image: ghcr.io/yundera/appshield:2.0.9
    cpu_shares: 80
    container_name: metafeederwikicommons
    hostname: metafeederwikicommons
    restart: unless-stopped
    user: "0:0"
    expose:
      - 80
    environment:
      OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
      BACKEND_HOST: "metafeederwikicommons-feeder"
      BACKEND_PORT: "8080"
      LISTEN_PORT: "80"
    labels:
      caddy_0: metafeederwikicommons-${APP_DOMAIN}
      caddy_0.import: gateway_tls
      caddy_0.reverse_proxy: "{{upstreams 80}}"
      caddy_1: metafeederwikicommons-${APP_PUBLIC_IP_DASH}.nip.io
      caddy_1.import: gateway_tls
      caddy_1.reverse_proxy: "{{upstreams 80}}"
      caddy_2: metafeederwikicommons-${APP_PUBLIC_IP_DASH}.sslip.io
      caddy_2.reverse_proxy: "{{upstreams 80}}"
    depends_on:
      - metafeederwikicommons-feeder
    networks:
      - metafeederwikicommons
      - pcs

networks:
  metafeederwikicommons:
    name: metafeederwikicommons
    driver: bridge
  pcs:
    name: ${APP_NET:-pcs}
    external: true

x-casaos:
  architectures:
    - amd64
    - arm64
  author: Worph Team
  category: Media
  developer: Aptero Team
  main: metafeederwikicommons
  webui_port: 80
  index: /config

  description:
    en_us: |
      **Wikimedia Commons for the MetaMesh network.**

      MetaFeeder · Wikimedia Commons bridges open-licensed media from **Wikimedia
      Commons** into MetaMesh. Keyless — no setup required.
      **Requires:** **MetaGateway** — its meta-core stores the resolved records and
      announces them to the swarm. The gateway must list this feeder in its config.
    fr_fr: |
      **Wikimedia Commons pour le réseau MetaMesh.**

      MetaFeeder · Wikimedia Commons connecte les médias sous licence libre de
      **Wikimedia Commons** à MetaMesh. Sans clé ni configuration. **Nécessite**
      l'app **MetaGateway**.
  tagline:
    en_us: Wikimedia Commons open-licensed media for MetaMesh
    fr_fr: Médias libres Wikimedia Commons pour MetaMesh

  title:
    en_us: MetaFeeder · Wikimedia Commons

  icon: https://cdn.jsdelivr.net/gh/Worph/MetaAppStore@main/Apps/MetaFeederWikiCommons/icon.png
  thumbnail: https://cdn.jsdelivr.net/gh/Worph/MetaAppStore@main/Apps/MetaFeederWikiCommons/thumbnail.png

  store_app_id: metafeederwikicommons
  is_uncontrolled: false

  tips:
    before_install:
      en_us: |
        **Install order:** install **MetaGateway** first (its meta-core stores and
        announces what this feeder finds).

        **After installing this app:** in **MetaGateway**, add this feeder from the
        dashboard's *Add a feeder* box — name `wikicommons-feeder`, URL `http://metafeederwikicommons-feeder:8080`.
        The gateway restarts itself: feeder discovery is startup-only.
        No other setup.
        **Authentication:** the config UI is protected by Yundera's Authelia (OIDC).

# Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
# schema_version 2 is required for `folders`: an older Maison refuses the app
# outright rather than starting it without its directories.
x-compose-app:
  schema_version: 2
  # Created and chowned by Maison before any image is pulled, before any hook
  # runs and before the containers start — on the first boot and every one after.
  # Compose would otherwise create a missing bind source as a root-owned dir.
  folders:
    - path: /DATA/AppData/metafeederwikicommons/state
      user: $PUID
      group: $PGID
  # Same string as the caddy_0 label, so the tile link and the route agree.
  webui-host: metafeederwikicommons-${domain}
  webui-path: "/config"