services:
  nasdrop:
    image: ghcr.io/littleweirdlab0514-web/nasdrop:latest
    build:
      context: .
      args:
        NASDROP_VERSION: "0.9.29"
    container_name: nasdrop
    restart: unless-stopped
    init: true
    stop_grace_period: 60s
    read_only: true
    ports:
      - "${NASDROP_BIND_ADDRESS:-0.0.0.0}:${NASDROP_PORT:-8791}:8791"
    environment:
      PUID: "${PUID:-1000}"
      PGID: "${PGID:-1000}"
      TZ: "${TZ:-Asia/Seoul}"
      NAS_PORTAL_NAS_TARGET: /downloads
      NAS_PORTAL_STORAGE_ROOTS: /downloads
      NAS_PORTAL_TRUST_FORWARDED_FOR: "${NASDROP_TRUST_FORWARDED_FOR:-false}"
    volumes:
      - "${NASDROP_CONFIG_DIR:-./nasdrop-config}:/config"
      - "${NASDROP_DOWNLOAD_DIR:-./downloads}:/downloads"
    tmpfs:
      - /tmp:size=1g,mode=1777
    security_opt:
      - no-new-privileges:true