services:
  api:
    build:
      context: .
      dockerfile: server/Dockerfile
    image: ${WEBDROP_IMAGE_REPO:-webdrop-api}:${WEBDROP_IMAGE_TAG:-local}
    platform: linux/amd64
    restart: unless-stopped
    init: true
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=16m
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    environment:
      ASPNETCORE_URLS: http://+:5000
      WebDrop__DataDir: /data
      WebDrop__RequestsPerMinute: ${WEBDROP_REQUESTS_PER_MINUTE:-600}
      WebDrop__ChannelCreatesPerMinute: ${WEBDROP_CREATES_PER_MINUTE:-30}
      WebDrop__SweepIntervalSeconds: ${WEBDROP_SWEEP_INTERVAL_SECONDS:-30}
      WebDrop__TrustForwardedHeaders: ${WEBDROP_TRUST_FORWARDED_HEADERS:-false}
      WebDrop__Captcha__Provider: ${CAPTCHA_PROVIDER:-none}
      WebDrop__Captcha__ApiEndpoint: ${CAPTCHA_API_ENDPOINT:-}
      WebDrop__Captcha__SiteverifyUrl: ${CAPTCHA_SITEVERIFY_URL:-}
      WebDrop__Captcha__Secret: ${CAPTCHA_SECRET:-}
      WebDrop__Captcha__TimeoutSeconds: ${CAPTCHA_TIMEOUT_SECONDS:-5}
    ports:
      - "${API_BIND_ADDRESS:-127.0.0.1}:${API_PORT:-5000}:5000"
    volumes:
      - ./data:/data