services:
  aliyun-guard:
    build:
      context: .
      args:
        APP_VERSION: "1.6.25"
    image: aliyun-guard:1.6.25
    container_name: aliyun-guard
    restart: unless-stopped
    environment:
      TZ: ${TZ:-Asia/Shanghai}
      ALIYUN_GUARD_CONTAINER: "1"
      ALIYUN_GUARD_CONTAINER_WEB_PORT: "8765"
      ALIYUN_GUARD_HOST_BIND_IP: "${ALIYUN_GUARD_BIND_IP:-127.0.0.1}"
      ALIYUN_GUARD_PUBLIC_WEB_PORT: "${ALIYUN_GUARD_WEB_PORT:-8765}"
      ALIYUN_GUARD_PUBLIC_IP: "${ALIYUN_GUARD_PUBLIC_IP:-}"
    ports:
      - "${ALIYUN_GUARD_BIND_IP:-127.0.0.1}:${ALIYUN_GUARD_WEB_PORT:-8765}:8765"
    volumes:
      - ./docker-data:/data
      - aliyun-guard-bin:/opt/aliyun-guard/bin
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

volumes:
  aliyun-guard-bin: