services:
  cryostat:
    deploy:
      resources:
        limits:
          cpus: "2"
          memory: 1024m
    image: ${CRYOSTAT_IMAGE:-quay.io/cryostat/cryostat:${CRYOSTAT_VERSION:-latest}}
    volumes:
      - ${XDG_RUNTIME_DIR}/podman/podman.sock:/run/user/1000/podman/podman.sock:Z
      - jmxtls_cfg:/truststore:U
      - templates:/opt/cryostat.d/templates.d:U
      - probes:/opt/cryostat.d/probes.d:U
      - credentials:/opt/cryostat.d/credentials.d:U
    security_opt:
      - label:disable
    hostname: cryostat
    user: "1000"
    environment:
      CRYOSTAT_AUDIT_ENABLED: ${CRYOSTAT_AUDIT_ENABLED:-true}
      QUARKUS_LOG_LEVEL: ${CRYOSTAT_LOG_LEVEL:-INFO}
      QUARKUS_REST_CLIENT_LOGGING_SCOPE: request-response
      QUARKUS_HTTP_ACCESS_LOG_ENABLED: "true"
      QUARKUS_HTTP_ACCESS_LOG_PATTERN: long
      QUARKUS_HTTP_HOST: "cryostat"
      QUARKUS_HTTP_PORT: ${CRYOSTAT_HTTP_PORT}
      QUARKUS_HIBERNATE_ORM_LOG_SQL: "true"
      STORAGE_METADATA_STORAGE_MODE: ${CRYOSTAT_STORAGE_MODE:-tagging}
      STORAGE_BUCKETS_ARCHIVES_NAME: ${CRYOSTAT_STORAGE_BUCKETS_ARCHIVES_NAME:-archivedrecordings}
      CRYOSTAT_SERVICES_REPORTS_STORAGE_CACHE_NAME: ${CRYOSTAT_STORAGE_BUCKETS_ARCHIVED_REPORTS_NAME:-archivedreports}
      STORAGE_BUCKETS_EVENT_TEMPLATES_NAME: ${CRYOSTAT_STORAGE_BUCKETS_EVENT_TEMPLATES_NAME:-eventtemplates}
      STORAGE_BUCKETS_PROBE_TEMPLATES_NAME: ${CRYOSTAT_STORAGE_BUCKETS_PROBE_TEMPLATES_NAME:-probetemplates}
      STORAGE_BUCKETS_HEAP_DUMPS_NAME: ${CRYOSTAT_STORAGE_BUCKETS_HEAP_DUMPS_NAME:-heapdumps}
      STORAGE_BUCKETS_THREAD_DUMPS_NAME: ${CRYOSTAT_STORAGE_BUCKETS_THREAD_DUMPS_NAME:-threaddumps}
      STORAGE_BUCKETS_METADATA_NAME: ${CRYOSTAT_STORAGE_BUCKETS_METADATA_NAME:-cryostatmeta}
      CRYOSTAT_DISCOVERY_JDP_ENABLED: ${CRYOSTAT_DISCOVERY_JDP_ENABLED:-true}
      CRYOSTAT_DISCOVERY_PODMAN_ENABLED: ${CRYOSTAT_DISCOVERY_PODMAN_ENABLED:-true}
      CRYOSTAT_DISCOVERY_DOCKER_ENABLED: ${CRYOSTAT_DISCOVERY_DOCKER_ENABLED:-true}
      CRYOSTAT_AGENT_TLS_REQUIRED: ${ENFORCE_AGENT_TLS:-false}
      JAVA_OPTS_APPEND: ${CRYOSTAT_JAVA_OPTS}
    restart: unless-stopped
    healthcheck:
      test: curl --fail http://cryostat:${CRYOSTAT_HTTP_PORT}/health/liveness || exit 1
      interval: 10s
      retries: 3
      start_period: 30s
      timeout: 5s

volumes:
  jmxtls_cfg:
    external: true
  templates:
    external: true
  probes:
    external: true
  credentials:
    external: true