name: certscope

services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        BUILD_VERSION: ${CERTSCOPE_VERSION:-1.0.4}
        BUILD_REVISION: ${GITEA_COMMIT_SHA:-${CERTSCOPE_BUILD_REVISION:-local}}
    container_name: certscope
    restart: unless-stopped
    ports:
      - "1251:3000"
    labels:
      net.unraid.docker.webui: "http://localhost:1251"
      net.unraid.docker.icon: "http://localhost:1251/dockerman-icon.png"
      org.opencontainers.image.revision: "${GITEA_COMMIT_SHA:-${CERTSCOPE_BUILD_REVISION:-local}}"
      org.opencontainers.image.source: "https://gitea.itworx.tech/Jens/CertScope-Public.git"
      org.opencontainers.image.version: "${CERTSCOPE_VERSION:-1.0.4}"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    init: true
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m
    mem_limit: 768m
    cpus: 1.5
    stop_grace_period: 15s
    logging:
      driver: json-file
      options:
        max-size: "20m"
        max-file: "3"