name: gitpocket

services:
  gitpocket:
    build:
      context: ..
      args:
        UID: "${GITPOCKET_UID:?set GITPOCKET_UID}"
        GID: "${GITPOCKET_GID:?set GITPOCKET_GID}"
    image: gitpocket
    container_name: gitpocket
    command: ["serve", "-listen", ":3200", "-host", "${GITPOCKET_HOST:?set GITPOCKET_HOST}", "-proxy", "172.31.255.1/32"]
    user: "${GITPOCKET_UID:?set GITPOCKET_UID}:${GITPOCKET_GID:?set GITPOCKET_GID}"
    ports:
      - "127.0.0.1:3200:3200"
    volumes:
      - /srv/gitpocket:/srv/gitpocket
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777,noexec,nosuid,nodev
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    mem_limit: 512m
    pids_limit: 256
    restart: unless-stopped
    networks: [gitpocket]
networks:
  gitpocket:
    ipam:
      config:
        - subnet: 172.31.255.0/28
          gateway: 172.31.255.1