services:
  palcenter:
    image: ${PALCENTER_IMAGE:-ghcr.io/shanebionic/palcenter:latest}
    user: "${PALCENTER_UID:-1000}:${PALCENTER_GID:-1000}"
    init: true
    restart: unless-stopped
    ports:
      - "${PALCENTER_WEB_PORT:-3000}:3000"
      - "${PALCENTER_API_PORT:-3001}:3001"
    environment:
      WEB_PORT: 3000
      API_PORT: 3001
      CONFIG_DIR: /app/data
      HISTORY_INTERVAL_SECONDS: ${PALCENTER_HISTORY_INTERVAL_SECONDS:-30}
      TELEMETRY_INTERVAL_SECONDS: ${PALCENTER_TELEMETRY_INTERVAL_SECONDS:-30}
      TELEMETRY_RETENTION_DAYS: ${PALCENTER_TELEMETRY_RETENTION_DAYS:-30}
      AUTOMATION_INTERVAL_SECONDS: ${PALCENTER_AUTOMATION_INTERVAL_SECONDS:-15}
      PALCENTER_SESSION_SECRET: ${PALCENTER_SESSION_SECRET:-}
      PALCENTER_SESSION_DURATION_SECONDS: ${PALCENTER_SESSION_DURATION_SECONDS:-43200}
      PALCENTER_SESSION_COOKIE_SECURE: ${PALCENTER_SESSION_COOKIE_SECURE:-false}
      PALCENTER_CORS_ORIGINS: ${PALCENTER_CORS_ORIGINS:-}
      PALCENTER_TRUST_PROXY: ${PALCENTER_TRUST_PROXY:-false}
      LOG_LEVEL: ${PALCENTER_LOG_LEVEL:-info}
      PALCENTER_BACKUP_MAX_BYTES: ${PALCENTER_BACKUP_MAX_BYTES:-536870912}
    volumes:
      - palcenter-data:/app/data
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

volumes:
  palcenter-data: