# Settings come from .env (copy .env.example). See README.md for HTTPS setup.
services:
  e2epaste:
    build: .
    image: e2epaste
    restart: unless-stopped
    environment:
      ROCKET_SITE_URL: ${SITE_URL:-http://localhost:8001}
      ROCKET_SITE_NAME: ${SITE_NAME:-}
      ROCKET_MAX_PASTE_KIB: ${MAX_PASTE_KIB:-1024}
      ROCKET_ALLOW_FILES: ${ALLOW_FILES:-true}
      ROCKET_MAX_FILE_MIB: ${MAX_FILE_MIB:-25}
      # Empty turns the admin API off.
      ROCKET_ADMIN_TOKEN: ${ADMIN_TOKEN:-}
    ports:
      # Only reachable from this machine: put a reverse proxy with HTTPS in
      # front. Browsers won't run the encryption on plain HTTP.
      - "127.0.0.1:${PORT:-8001}:8001"
    volumes:
      - e2epaste-data:/data

volumes:
  e2epaste-data: