services:
  kb-helpdesk:
    build: .
    container_name: kb-helpdesk
    restart: unless-stopped
    ports:
      - "${KB_EDITOR_PORT:-8080}:8080"
    environment:
      APP_MODE: "${APP_MODE:-editor}"
      APP_TITLE: "${APP_TITLE:-}"
      APP_SUBTITLE: "${APP_SUBTITLE:-}"
      AUTO_RELOAD_INTERVAL: "${AUTO_RELOAD_INTERVAL:-}"
      DATA_DIR: /data/knowledge
      BACKUP_DIR: /data/backups
      LISTEN_ADDR: :8080
      BASIC_AUTH_USER: "${BASIC_AUTH_USER:-}"
      BASIC_AUTH_PASSWORD: "${BASIC_AUTH_PASSWORD:-}"
    volumes:
      - "${KB_DATA_PATH:-./knowledge}:/data/knowledge:${KB_DATA_MOUNT_MODE:-rw}"
      - "${KB_BACKUP_PATH:-./backups}:/data/backups"
    read_only: true
    tmpfs:
      - /tmp:size=32m
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL