services:
  trek:
    image: "mauriceboe/trek:latest"
    container_name: ${CONTAINER_NAME}
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETUID
      - SETGID
    tmpfs:
      - /tmp:noexec,nosuid,size=64m
    ports:
      - "${PANEL_APP_PORT_HTTP}:3000"
    environment:
      - NODE_ENV=production
      - PORT=3000
      - ENCRYPTION_KEY=${ENCRYPTION_KEY:-}
      - TZ=${TZ}
      - LOG_LEVEL=${LOG_LEVEL}
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-}
      - ADMIN_EMAIL=${ADMIN_EMAIL:-}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-}
    volumes:
      - "${APP_DATA_DIR}:/app/data"
      - "${APP_UPLOADS_DIR}:/app/uploads"
    healthcheck:
      test:
        - CMD
        - wget
        - -qO-
        - http://localhost:3000/api/health
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 15s
    labels:
      createdBy: Apps
    networks:
      - 1panel-network
    restart: unless-stopped

networks:
  1panel-network:
    external: true