volumes:
  config: {}
  db: {}

services:
  unifi-network-application:
    hostname: unifi
    image: linuxserver/unifi-network-application:9.1.120
    restart: always
    container_name: unifi
    volumes:
      - config:/config
    ports:
      - target: 3478
        published: 3478
        protocol: udp
        mode: host
      - target: 10001
        published: 10001
        protocol: udp
      - target: 1900
        published: 1900
        protocol: udp
        mode: host
      - target: 8443
        published: 8443
        protocol: tcp
        mode: host
      - target: 8080
        published: 8080
        protocol: tcp
        mode: host
      - target: 8843
        published: 8843
        protocol: tcp
        mode: host
      - target: 8880
        published: 8880
        protocol: tcp
        mode: host
      - target: 6789
        published: 6789
        protocol: tcp
        mode: host
      - target: 5514
        published: 5514
        protocol: udp
        mode: host
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=UTC
      - MONGO_USER=${MONGO_USER-mongounifi}
      - MONGO_PASS=${MONGO_PASS-l7v3dN5MIOCNbcgEYA}
      - MONGO_HOST=mongo
      - MONGO_PORT=27017
      - MONGO_DBNAME=unifi
      - MONGO_AUTHSOURCE=admin

  mongo:
    image: mongo:${TAG-4.4-focal}
    environment:
      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USER-mongounifi}
      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PASS-l7v3dN5MIOCNbcgEYA}
    volumes:
      - db:/data/db
    restart: always
    deploy:
      resources:
        limits:
          memory: ${MEMORY-2G}
          cpus: ${CPU-2}

// keep N-day worth of data
days=30;
dryrun=true;
 
use ace;
collectionNames = db.getCollectionNames();
for (i=0; i < collectionNames.length; i++) {
    name = collectionNames[i];
    query = null;
    if (name.indexOf('stat')==0 || name.indexOf('event')==0 || name.indexOf('alarm')==0) {
        query = {time: {$lt:new Date().getTime()-days*86400*1000}};
    }
    if (name.indexOf('session')==0) {
        query = {assoc_time: {$lt:new Date().getTime()/1000-days*86400}};
    }
    if (name.indexOf('user')==0) {
        query = {last_seen: {$lt:new Date().getTime()/1000-days*86400}};
    }
    if (query) {
        count = db.getCollection(name).find(query).count();
        print((dryrun ? "[dryrun] " : "") + "pruning " + count + " entries from " + name + "... ");
        if (!dryrun)
         db.getCollection(name).remove(query);
    }
}

server {
  listen 80 default_server;
  server_name unifi.domain.com;
  return 302 https://unifi.domain.com$request_uri;
}

server {
  listen 443 ssl;
  server_name unifi.domain.com;

  ssl on;
  ssl_certificate /etc/nginx/ssl/server.crt;
  ssl_certificate_key /etc/nginx/ssl/server.key;
  ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;
  ssl_prefer_server_ciphers on;
  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  ssl_session_cache shared:SSL:10m;
  ssl_session_timeout 5m;
  server_tokens off;

  location / {
    proxy_set_header Referer "";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_pass https://unifi.domain.com:8443/;
  }
}