services:
  sandrone:
    image: ${SANDRONE_IMAGE:-ghcr.io/kuuvahki-labs/sandrone:latest}
    command:
      - serve
      - http
    environment:
      SANDRONE_STORAGE_BACKEND: ${SANDRONE_STORAGE_BACKEND:-filesystem}
      SANDRONE_DATA_DIR: ${SANDRONE_DATA_DIR:-/app/data}
      SANDRONE_LISTEN: ${SANDRONE_LISTEN:-0.0.0.0:1137}
      SANDRONE_TOKEN: ${SANDRONE_TOKEN:-sandrone}
      SANDRONE_S3_ENDPOINT: ${SANDRONE_S3_ENDPOINT:-}
      SANDRONE_S3_REGION: ${SANDRONE_S3_REGION:-}
      SANDRONE_S3_BUCKET: ${SANDRONE_S3_BUCKET:-}
      SANDRONE_S3_PREFIX: ${SANDRONE_S3_PREFIX:-sandrone/}
      SANDRONE_S3_FORCE_PATH_STYLE: ${SANDRONE_S3_FORCE_PATH_STYLE:-false}
      SANDRONE_S3_ACCESS_KEY_ID: ${SANDRONE_S3_ACCESS_KEY_ID:-}
      SANDRONE_S3_SECRET_ACCESS_KEY: ${SANDRONE_S3_SECRET_ACCESS_KEY:-}
      SANDRONE_S3_SESSION_TOKEN: ${SANDRONE_S3_SESSION_TOKEN:-}
    ports:
      - "0.0.0.0:1137:1137"
    volumes:
      - sandrone-data:/app/data
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:1137/healthz"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    restart: unless-stopped

volumes:
  sandrone-data: