services:
  pokesim:
    image: ${POKESIM_IMAGE:-ghcr.io/afk-sapien/pokesim:0.6.2}
    init: true
    restart: unless-stopped
    command: [python, -m, pokesim, serve, --data-dir, /data, --host, 0.0.0.0]
    ports:
      - "${BIND_ADDRESS:-127.0.0.1}:${HTTP_PORT:-8930}:8000"
    environment:
      PUBLIC_URL: ${PUBLIC_URL:-http://localhost:${HTTP_PORT:-8930}}
      PORT: "8000"
      # Accounts (docs/authentication.md). Empty AUTH stays open until accounts are set up. Remove the
      # admin pair once the first admin exists.
      AUTH: ${AUTH:-}
      AUTH_TRUSTED_PROXIES: ${AUTH_TRUSTED_PROXIES:-}
      POKESIM_ADMIN_USER: ${POKESIM_ADMIN_USER:-}
      POKESIM_ADMIN_PASSWORD: ${POKESIM_ADMIN_PASSWORD:-}
      # Optional defaults. Notifications are normally set up in the Library.
      NTFY_URL: ${NTFY_URL:-}
      NTFY_TOKEN: ${NTFY_TOKEN:-}
      NTFY_MIN_PRIORITY: ${NTFY_MIN_PRIORITY:-2}
      NTFY_MUTE: ${NTFY_MUTE:-}
    volumes:
      - ${DATA_PATH:-./pokesim-app}:/data
    security_opt:
      - no-new-privileges:true
    cap_drop: [ALL]
    read_only: true
    tmpfs:
      - /tmp:size=256m,mode=1777
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: "3"
    stop_grace_period: 90s