name: plainleaf

services:
  plainleaf:
    build:
      context: ../..
      dockerfile: Dockerfile.nas
      args:
        GITHUB_SHA: ${PLAINLEAF_GIT_SHA:-unknown}
    image: plainleaf:${PLAINLEAF_IMAGE_TAG:-local}
    container_name: plainleaf
    restart: unless-stopped
    user: "${PLAINLEAF_UID:-1001}:${PLAINLEAF_GID:-1001}"
    environment:
      SB_HOSTNAME: 0.0.0.0
      SB_PORT: 3000
      SB_FOLDER: /space
      SB_NAME: Plainleaf
      SB_USER: ${PLAINLEAF_USER:?Set PLAINLEAF_USER in the NAS deployment .env file}
      SB_SHELL_BACKEND: "off"
    ports:
      - "${PLAINLEAF_PORT:-3000}:3000"
    volumes:
      - "${PLAINLEAF_SPACE_PATH:?Set PLAINLEAF_SPACE_PATH in the NAS deployment .env file}:/space"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    init: false
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://127.0.0.1:3000/.instance"]
      interval: 30s
      timeout: 5s
      start_period: 20s
      retries: 5
    networks:
      - plainleaf

networks:
  plainleaf:
    name: plainleaf_network