name: hamkar

services:
  app:
    image: ${HAMKAR_IMAGE:-hamkar:local}
    build:
      context: .
      dockerfile: build/dockerfile
      args:
        GO_PROXY: ${GOPROXY:-https://proxy.golang.org/}
    restart: unless-stopped
    ports:
      - "${APP_PORT:-8080}:8080"
    environment:
      APP_ADDR: ":8080"
      APP_BASE_URL: ${APP_BASE_URL:-http://localhost:8080}
      APP_TIMEZONE: ${APP_TIMEZONE:-Asia/Tehran}
      DATABASE_PATH: /data/teammate.db
      SESSION_SECURE: ${SESSION_SECURE:-false}
      INITIAL_ADMIN_PASSWORD: ${INITIAL_ADMIN_PASSWORD:-admin123}
      GITHUB_CLIENT_ID: ${GITHUB_CLIENT_ID:-}
      GITHUB_CLIENT_SECRET: ${GITHUB_CLIENT_SECRET:-}
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID:-}
      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET:-}
    volumes:
      - hamkar-data:/data
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    security_opt:
      - no-new-privileges:true
    stop_grace_period: 15s

volumes:
  hamkar-data: