services:
  kiwiki:
    build: .
    container_name: kiwiki
    ports:
      - "127.0.0.1:8082:8080"
    environment:
      KIWIKI_DATA_DIR: "/data"
      KIWIKI_USERS: "${KIWIKI_USERS:?KIWIKI_USERS must be set}"
      KIWIKI_BASE_URL: "http://localhost:8082"
      KIWIKI_TRUST_PROXY: "false"  # auf "true" setzen hinter Reverse-Proxy/TLS-Terminierung
      KIWIKI_CORS_ORIGINS: ""      # leer oder Komma-getrennte Origins; "*" mit WARNS-LOG (Default)
      KIWIKI_RATE_LIMIT_ENABLED: "true"  # Rate Limiting aktivieren (empfohlen)
      KIWIKI_SESSION_TTL_SECONDS: "${KIWIKI_SESSION_TTL_SECONDS:-2592000}"
      KIWIKI_OAUTH_TOKEN_SECRET: "${KIWIKI_OAUTH_TOKEN_SECRET:?KIWIKI_OAUTH_TOKEN_SECRET must be set}"
      KIWIKI_KNOWLEDGE_ENABLED: "${KIWIKI_KNOWLEDGE_ENABLED:-false}"
      KIWIKI_KNOWLEDGE_BACKFILL_BATCH_SIZE: "${KIWIKI_KNOWLEDGE_BACKFILL_BATCH_SIZE:-25}"
      KIWIKI_KNOWLEDGE_MAX_FILE_BYTES: "${KIWIKI_KNOWLEDGE_MAX_FILE_BYTES:-1048576}"
      KIWIKI_KNOWLEDGE_MAX_DB_BYTES: "${KIWIKI_KNOWLEDGE_MAX_DB_BYTES:-134217728}"
    volumes:
      - ./data:/data
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8080/livez', timeout=2)"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    restart: unless-stopped