services:
  request-inbox:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "80:80"
      - "8080:8080"
    environment:
      - API_MODE=server
      - API_HTTP_PORT=8080
      - CORS_ALLOW_ORIGINS=http://localhost
      - DB_ENGINE=badger
      - DB_BADGER_PATH=/app/data
      - GIN_MODE=release
      - ENABLE_PRINT_CONFIG=false
      # Permissive local callbacks; production Lambda uses secure application defaults.
      - ENABLE_CALLBACK_URL_VALIDATION=${ENABLE_CALLBACK_URL_VALIDATION:-false}
      - CALLBACK_ALLOWED_HOSTS=${CALLBACK_ALLOWED_HOSTS:-}
      - CALLBACK_BLOCKED_HOSTS=${CALLBACK_BLOCKED_HOSTS:-}
      - CALLBACK_ALLOW_PUBLIC_IPS=${CALLBACK_ALLOW_PUBLIC_IPS:-true}
      - CALLBACK_ALLOW_PRIVATE_IPS=${CALLBACK_ALLOW_PRIVATE_IPS:-true}
      - CALLBACK_ALLOW_LOOPBACK_IPS=${CALLBACK_ALLOW_LOOPBACK_IPS:-true}
      - CALLBACK_ALLOW_LINK_LOCAL_IPS=${CALLBACK_ALLOW_LINK_LOCAL_IPS:-true}
      - ENABLE_CALLBACK_FOLLOW_REDIRECTS=${ENABLE_CALLBACK_FOLLOW_REDIRECTS:-false}
      - ENABLE_LISTING_PUBLIC_INBOX=true
    volumes:
      - inbox-data:/app/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost/api/v1/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

volumes:
  inbox-data:
    driver: local