services:
  app:
    build: .
    image: ai-disclosure-standard:1.6.2-local
    environment:
      BASE_URL: "${BASE_URL:-http://localhost:8080}"
      PUBLIC_NAME: "${PUBLIC_NAME:-AI Usage Disclosure}"
      CONTACT_URL: "${CONTACT_URL:-https://b1tsblog.org/page/ai}"
      DEFAULT_LANGUAGE: "${DEFAULT_LANGUAGE:-de}"
      TRUST_PROXY: "${TRUST_PROXY:-true}"
      LICENSE_TOKEN: "${LICENSE_TOKEN:-}"
      LICENSE_MODE: "${LICENSE_MODE:-offline}"
      LICENSE_SERVER_URL: "${LICENSE_SERVER_URL:-}"
      LICENSE_INSTANCE_ID: "${LICENSE_INSTANCE_ID:-}"
      LICENSE_CACHE_FILE: /data/license-lease.json
      LICENSE_REFRESH_INTERVAL: "${LICENSE_REFRESH_INTERVAL:-15m}"
      LICENSE_REQUEST_TIMEOUT: "${LICENSE_REQUEST_TIMEOUT:-5s}"
    ports:
      - "8080:8080"
    volumes:
      - license-cache:/data
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "/ai-disclosure", "--healthcheck"]
      interval: 15s
      timeout: 3s
      retries: 3
      start_period: 5s

volumes:
  license-cache: