services:
  vinted-sniper:
    image: ghcr.io/jasp-nerd/vinted-sniper:latest
    # To run your own build instead of the published image, comment out `image:` above
    # and uncomment this:
    # build: .
    container_name: vinted-sniper
    restart: unless-stopped
    # Optional: everything runs on defaults without one. Grab .env.example if you want
    # Telegram or any tuning.
    env_file:
      - path: .env
        required: false
    volumes:
      - vinted-sniper-data:/data
    ports:
      # The dashboard, reachable from this machine only. If you widen this beyond
      # 127.0.0.1, set VINTED_SNIPER_WEB_AUTH_TOKEN first — the dashboard has no other
      # lock, and it shows your webhook URLs.
      - "127.0.0.1:8000:8000"
    # Nothing in here writes outside /data, so the rest of the filesystem can stay
    # read-only.
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  vinted-sniper-data: