services:
  app:
    image: ${APP_IMAGE:-ghcr.io/fawney19/aether:latest}
    container_name: aether-app
    user: "${AETHER_CONTAINER_UID:-65532}:${AETHER_CONTAINER_GID:-65532}"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:rw,nosuid,nodev,noexec,mode=1777
    env_file:
      - ${AETHER_ENV_FILE:-.env}
    environment:
      TZ: Asia/Shanghai
      AETHER_BASE_DIR: /opt/aether
      AETHER_UPDATE_STRATEGY: docker
      AETHER_DOCKER_UPDATE_COMMAND: ${AETHER_DOCKER_UPDATE_COMMAND:-./update.sh}
      AETHER_DATABASE_DRIVER: sqlite
      AETHER_DATABASE_URL: sqlite:///opt/aether/data/aether.db
      AETHER_RUNTIME_BACKEND: memory
      AETHER_GATEWAY_DEPLOYMENT_TOPOLOGY: single-node
      AETHER_GATEWAY_NODE_ROLE: all
      AETHER_LOG_DESTINATION: stdout
      AETHER_LOG_FORMAT: ${AETHER_LOG_FORMAT:-pretty}
      APP_PORT: ${APP_PORT:-8084}
      AETHER_GATEWAY_AUTO_PREPARE_DATABASE: ${AETHER_GATEWAY_AUTO_PREPARE_DATABASE:-true}
    ports:
      - "${APP_PORT:-8084}:${APP_PORT:-8084}"
    volumes:
      - ./data:/opt/aether/data
    logging:
      driver: json-file
      options:
        max-size: "100m"
        max-file: "10"
    restart: unless-stopped