services:
  server:
    build:
      context: ../..
      dockerfile: deploy/docker/Dockerfile
      args:
        REMLINK_VERSION: "1.0.0"
        APT_FORCE_IPV4: "${REMLINK_APT_FORCE_IPV4:-1}"
        APT_DEBIAN_MIRROR: "${REMLINK_APT_DEBIAN_MIRROR:-}"
        APT_SECURITY_MIRROR: "${REMLINK_APT_SECURITY_MIRROR:-}"
    image: remlink/server:1.0.0
    restart: unless-stopped
    cap_drop:
      - ALL
    cap_add:
      - NET_ADMIN
    security_opt:
      - no-new-privileges:true
    devices:
      - /dev/net/tun:/dev/net/tun
    sysctls:
      net.ipv4.ip_forward: "1"
    ports:
      - "${REMLINK_HTTP_BIND:-0.0.0.0}:8080:8080/tcp"
      - "${REMLINK_WG_PORT:-51820}:${REMLINK_WG_PORT:-51820}/udp"
    environment:
      REMLINK_WG_ENDPOINT: ${REMLINK_WG_ENDPOINT:?set REMLINK_WG_ENDPOINT to the public host and published UDP port}
      REMLINK_ADMIN_TOKEN: ${REMLINK_ADMIN_TOKEN:-}
    volumes:
      - ./server.yaml:/etc/remlink/server.yaml:ro
      - ./data:/app/data