name: liberty-office
services:
  office:
    build:
      context: .
      args:
        RETAINED_PUBLIC_IMAGE: ${RETAINED_PUBLIC_IMAGE:-empty-public}
    image: ${LIBERTY_IMAGE:-liberty-office:0.2.0-rc.2}
    restart: unless-stopped
    init: true
    ports:
      - "${LIBERTY_BIND:-127.0.0.1}:${LIBERTY_PORT:-8097}:8097"
      - "${LIBERTY_BIND:-127.0.0.1}:${EDITOR_PORT:-8098}:8097"
      - "${LIBERTY_BIND:-127.0.0.1}:${DEMO_EDITOR_PORT:-8099}:8097"
    environment:
      PUBLIC_ORIGIN: ${PUBLIC_ORIGIN:-http://localhost:8097}
      EDITOR_ORIGIN: ${EDITOR_ORIGIN:-http://localhost:8098}
      DEMO_EDITOR_ORIGIN: ${DEMO_EDITOR_ORIGIN:-http://localhost:8099}
      LIBERTY_DATA: /data
      LIBERTY_APPS: /opt/artcraft
      GLOBAL_QUOTA_BYTES: ${GLOBAL_QUOTA_BYTES:-53687091200}
      DEFAULT_QUOTA_BYTES: ${DEFAULT_QUOTA_BYTES:-5368709120}
      MAX_UPLOAD_BYTES: ${MAX_UPLOAD_BYTES:-104857600}
      MIN_FREE_BYTES: ${MIN_FREE_BYTES:-16777216}
      PUBLIC_SIGNUP_ENABLED: ${PUBLIC_SIGNUP_ENABLED:-false}
      PUBLIC_SIGNUP_QUOTA_BYTES: ${PUBLIC_SIGNUP_QUOTA_BYTES:-100000000}
      SIGNUP_ATTEMPTS: ${SIGNUP_ATTEMPTS:-5}
      SIGNUP_SUCCESSES: ${SIGNUP_SUCCESSES:-20}
      SIGNUP_WINDOW_SECONDS: ${SIGNUP_WINDOW_SECONDS:-3600}
      SIGNUP_SLOTS: ${SIGNUP_SLOTS:-400}
      SIGNUP_PENDING_TTL_SECONDS: ${SIGNUP_PENDING_TTL_SECONDS:-86400}
      TRUSTED_PROXY_CIDRS: "${TRUSTED_PROXY_CIDRS:-}"
    volumes:
      - data:/data
    read_only: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m,mode=1777
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    mem_limit: 768m
    pids_limit: 128
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: "3"
volumes:
  data:
    name: ${LIBERTY_VOLUME_NAME:-liberty_office_data}