name: hermes-yaoyao

services:
  web:
    build:
      context: .
      dockerfile: Dockerfile
    image: "${HERMES_YAOYAO_IMAGE:-yaoyao:local}"
    restart: unless-stopped
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    ports:
      - "${HERMES_YAOYAO_BIND_ADDRESS:-127.0.0.1}:${HERMES_YAOYAO_PUBLISHED_PORT:-15300}:15300"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      NODE_ENV: production
      HERMES_YAOYAO_HOST: 0.0.0.0
      HERMES_YAOYAO_PORT: 15300
      HERMES_YAOYAO_UPSTREAM: "${HERMES_YAOYAO_UPSTREAM:-http://host.docker.internal:9119}"
      # Permit localhost access when the published host port differs from the
      # container's fixed 15300 port; configured public host names remain opt-in.
      HERMES_YAOYAO_ALLOWED_HOSTS: "localhost,127.0.0.1,${HERMES_YAOYAO_ALLOWED_HOSTS:-}"
      HERMES_YAOYAO_ALLOW_INSECURE_LAN: "1"
      HERMES_YAOYAO_SUPERVISE_DASHBOARD: "0"
      HERMES_YAOYAO_LOCAL_VM_HOST: "runner"
      HERMES_YAOYAO_CHAT_CACHE_MODE: "${HERMES_YAOYAO_CHAT_CACHE_MODE:-prefer-local}"
      HERMES_YAOYAO_RELEASE_SOURCE: "${HERMES_YAOYAO_RELEASE_SOURCE:-https://github.com/Lsamien/yaoyao.git}"
      HERMES_YAOYAO_HOME: /home/node/.yaoyao
      HERMES_YAOYAO_APNS_KEY_FILE: "${HERMES_YAOYAO_APNS_KEY_FILE:-}"
      HERMES_YAOYAO_APNS_KEY_ID: "${HERMES_YAOYAO_APNS_KEY_ID:-}"
      HERMES_YAOYAO_APNS_TEAM_ID: "${HERMES_YAOYAO_APNS_TEAM_ID:-}"
      HERMES_YAOYAO_APNS_TOPIC: "${HERMES_YAOYAO_APNS_TOPIC:-}"
    volumes:
      - yaoyao-data:/home/node/.yaoyao
    tmpfs:
      - /tmp:mode=1777

volumes:
  yaoyao-data: