# Compatibility compose file. Prefer running ../compose.yml from the repository root.
name: gpo-distributor

services:
  gpo-server:
    image: "${GPO_SERVER_IMAGE:-gpo-distributor-server:0.2.2}"
    build:
      context: ..
      dockerfile: Dockerfile
      args:
        VERSION: "${GPO_SERVER_VERSION:-0.2.2}"
    restart: unless-stopped
    init: true
    stop_grace_period: 25s
    environment:
      GPO_SERVER_LISTEN: ":8443"
      GPO_SERVER_DATA: "/data"
      GPO_SERVER_ADMIN_TOKEN: "${GPO_SERVER_ADMIN_TOKEN:?Set GPO_SERVER_ADMIN_TOKEN in .env}"
      GPO_SERVER_CLIENT_TOKEN: "${GPO_SERVER_CLIENT_TOKEN:?Set GPO_SERVER_CLIENT_TOKEN in .env}"
      GPO_SERVER_SIGNING_KEY: "${GPO_SERVER_SIGNING_KEY:?Set GPO_SERVER_SIGNING_KEY in .env}"
      GPO_SERVER_TLS_CERT: "${GPO_SERVER_TLS_CERT:-}"
      GPO_SERVER_TLS_KEY: "${GPO_SERVER_TLS_KEY:-}"
    command: ["-max-upload", "${GPO_SERVER_MAX_UPLOAD:-536870912}"]
    ports:
      - "${GPO_SERVER_BIND_ADDRESS:-0.0.0.0}:${GPO_SERVER_PORT:-8443}:8443"
    volumes:
      - gpo-data:/data
      - ../tls:/tls:ro
    read_only: true
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test:
        - CMD-SHELL
        - >-
          if [ -n "$${GPO_SERVER_TLS_CERT:-}" ]; then
            wget -q --no-check-certificate -O /dev/null https://127.0.0.1:8443/healthz;
          else
            wget -q -O /dev/null http://127.0.0.1:8443/healthz;
          fi
      interval: 30s
      timeout: 5s
      start_period: 10s
      retries: 3
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "5"

volumes:
  gpo-data:
    name: "${GPO_SERVER_DATA_VOLUME:-gpo-distributor-data}"