services:
  cup:
    image: "ghcr.io/sergi0g/cup:latest"
    container_name: ${CONTAINER_NAME}
    command:
      - serve
      - -p
      - "8000"
    restart: unless-stopped
    ports:
      - "${PANEL_APP_BIND_ADDRESS}:${PANEL_APP_PORT_HTTP}:8000"
    networks:
      - 1panel-network
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - CUP_REFRESH_INTERVAL=${CUP_REFRESH_INTERVAL}
      - CUP_THEME=${CUP_THEME}
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    labels:
      createdBy: "Apps"

networks:
  1panel-network:
    external: true