name: domain-control

services:
  dyndns:
    image: ${DYNDNS_IMAGE:-git.j-mahler.de/admin/domain-control-webinterface-prod}:${IMAGE_TAG:-v1.0.0}
    restart: unless-stopped
    init: true
    stop_grace_period: 20s
    ports:
      - "${BIND_ADDRESS:-127.0.0.1}:${WEB_PORT:-8080}:8080"
    environment:
      APP_MODE: ${APP_MODE:-https}
      APP_ADDRESS: :8080
      APP_DATA_DIR: /data
      APP_MASTER_KEY_FILE: /run/secrets/dyndns_master_key
    volumes:
      - dyndns-data:/data
    secrets:
      - dyndns_master_key
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=16m
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: "3"

secrets:
  dyndns_master_key:
    file: ${MASTER_KEY_FILE:-./secrets/dyndns_master_key}

volumes:
  dyndns-data:
    name: domain-control-data