BirdNET-PiPy/docker-compose.yml at main · Suncuss/BirdNET-PiPy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
services:
  model-server:
    image: ghcr.io/suncuss/birdnet-pipy-backend:${BIRDNET_CHANNEL:-main}
    build:
      context: ./backend
      dockerfile: Dockerfile
      args:
        UID: ${UID:-1000}
        GID: ${GID:-1000}
    command: python -m model_service.inference_server
    restart: unless-stopped
    volumes:
      - ./backend:/app
      - ./data:/app/data
      - ./data/flags:/app/data/flags
    environment:
      - PYTHONPATH=/app
      - BIRDNET_SERVICE_PORT=5001
      - LOG_FORMAT=human
      - LOG_LEVEL=INFO
    ports:
      - "127.0.0.1:5001:5001"

  api:
    image: ghcr.io/suncuss/birdnet-pipy-backend:${BIRDNET_CHANNEL:-main}
    # No build: — shares image built by model-server service
    command: python -m core.api
    restart: unless-stopped
    volumes:
      - ./backend:/app
      - ./data:/app/data
      - ./data/flags:/app/data/flags
    environment:
      - PYTHONPATH=/app
      - API_PORT=5002
      - LOG_FORMAT=human
      - LOG_LEVEL=INFO
    ports:
      # Bind to localhost only - nginx proxies external requests via docker network
      # This prevents direct access to internal endpoints like /api/broadcast/detection
      - "127.0.0.1:5002:5002"

  main:
    image: ghcr.io/suncuss/birdnet-pipy-backend:${BIRDNET_CHANNEL:-main}
    # No build: — shares image built by model-server service
    command: python -m core.main
    restart: unless-stopped
    ulimits:
      nofile:
        soft: 8192
        hard: 16384
    volumes:
      - ./backend:/app
      - ./data:/app/data
      - ./data/flags:/app/data/flags
      # PulseAudio socket for audio access
      # birdnet-service.sh ensures /run/pulse/native exists (system-wide or symlink to user socket)
      - /run/pulse:/run/pulse:ro
    environment:
      - PYTHONPATH=/app
      - PULSE_SERVER=unix:/run/pulse/native
      - LOG_FORMAT=human
      - LOG_LEVEL=INFO
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      - model-server
      - api

  icecast:
    image: ghcr.io/suncuss/birdnet-pipy-icecast:${BIRDNET_CHANNEL:-main}
    build:
      context: ./deployment/audio
      dockerfile: Dockerfile
      args:
        UID: ${UID:-1000}
        GID: ${GID:-1000}
    restart: unless-stopped
    volumes:
      # PulseAudio socket for audio access
      # birdnet-service.sh ensures /run/pulse/native exists (system-wide or symlink to user socket)
      - /run/pulse:/run/pulse:ro
      # User settings for RTSP URL configuration; needs write for data/logs/
      - ./data:/app/data
    environment:
      - PULSE_SERVER=unix:/run/pulse/native
      - ICECAST_PASSWORD=${ICECAST_PASSWORD:-}
      - STREAM_BITRATE=${STREAM_BITRATE:-320k}
      - TZ=UTC
    ports:
      # Bind to localhost only - nginx proxies /stream/ requests via docker network
      # This enforces authentication via nginx auth_request
      - "127.0.0.1:8888:8888"

  frontend:
    image: ghcr.io/suncuss/birdnet-pipy-frontend:${BIRDNET_CHANNEL:-main}
    build:
      context: ./frontend
      dockerfile: Dockerfile
    restart: unless-stopped
    ports:
      - "80:80"
    environment:
      - TZ=UTC
    depends_on:
      - api