name: amnezia-vpn-manager

services:
  web:
    image: registry.kadnikoff.ru/amnezia-vpn-manager:1.1.4@sha256:d670db9e1ae3f17ab1deb9594a04e635a3506679cd2aef9ede51ea0f77bf8a10
    restart: unless-stopped
    ports:
      - "127.0.0.1:5097:8080"
    environment:
      ASPNETCORE_ENVIRONMENT: Production
      ASPNETCORE_FORWARDEDHEADERS_ENABLED: "true"
      Inventory__DatabasePath: /app/data/inventory.db
      Inventory__KeyRingPath: /app/keys
      Inventory__SeedDemoData: "false"
      Auth__Username: ${AVM_AUTH_USERNAME:-admin}
      Auth__Password: ${AVM_AUTH_PASSWORD:?Set your own AVM_AUTH_PASSWORD in .env}
      Auth__FirstName: ${AVM_AUTH_FIRST_NAME:-System}
      Auth__LastName: ${AVM_AUTH_LAST_NAME:-Administrator}
      Monitoring__TimeZone: ${AVM_TIME_ZONE:-Europe/Saratov}
    volumes:
      - inventory_data:/app/data
      - keyring_data:/app/keys
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    mem_limit: 512m
    pids_limit: 256
    healthcheck:
      test:
        - CMD
        - bash
        - -ec
        - >-
          exec 3<>/dev/tcp/127.0.0.1/8080;
          printf 'GET /Account/Login HTTP/1.0\r\nHost: localhost\r\n\r\n' >&3;
          read -r line <&3;
          [[ "$$line" == *" 200 "* ]]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s

volumes:
  inventory_data:
  keyring_data: