services:
  bot:
    build: .
    image: pocket-option-telegram-bot:latest
    container_name: pocket-option-bot
    restart: unless-stopped
    init: true
    stop_grace_period: 20s

    env_file:
      - .env
    environment:
      DB_PATH: /app/data/bot.sqlite
      HEARTBEAT_PATH: /app/data/heartbeat

    user: "${DOCKER_UID:-1000}:${DOCKER_GID:-1000}"

    volumes:
      - type: bind
        source: ${DATA_DIR:-./data}
        target: /app/data
        bind:
          create_host_path: false

    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    mem_limit: 512m

    healthcheck:
      test: ["CMD", "bun", "run", "docker/healthcheck.ts"]
      interval: 60s
      timeout: 10s
      retries: 3
      start_period: 45s

    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "5"