services:
  dockwatch-master:
    image: dockwatch:local
    restart: unless-stopped
    ports: ["8080:8080"]
    environment:
      APP_MODE: master
      BASE_URL: "https://dockwatch.example.com"
      APP_SECRET: "replace-with-at-least-32-random-characters"
      AUTH_DISABLED: "false"
      OIDC_ISSUER: "https://id.example.com"
      OIDC_CLIENT_ID: "replace-me"
      OIDC_CLIENT_SECRET: "replace-me"
      OIDC_ADMIN_GROUP: "dockwatch-admins"
      OIDC_OPERATOR_GROUP: "dockwatch-operators"
      CHECK_CONCURRENCY: "8"
      CHECK_RETENTION_DAYS: "30"
      HTTP_TIMEOUT_SECONDS: "10"
      AUDIT_RETENTION_DAYS: "180"
    volumes:
      - ./master-data:/data
      - ./master-stacks:/stacks
      - /var/run/docker.sock:/var/run/docker.sock