services:
  tinyauth:
    image: "ghcr.io/tinyauthapp/tinyauth:v5"
    container_name: ${CONTAINER_NAME}
    restart: unless-stopped
    user: "1000:1000"
    networks:
      - 1panel-network
    ports:
      - "${PANEL_APP_PORT_HTTP}:3000"
    environment:
      - TINYAUTH_APPURL=${TINYAUTH_APP_URL}
      - TINYAUTH_LABELPROVIDER=none
      - TINYAUTH_AUTH_USERSFILE=/data/users
      - TINYAUTH_AUTH_SECURECOOKIE=${TINYAUTH_SECURE_COOKIE}
      - TINYAUTH_ANALYTICS_ENABLED=false
      - TINYAUTH_SERVER_ADDRESS=0.0.0.0
      - TINYAUTH_SERVER_PORT=3000
      - TINYAUTH_DATABASE_DRIVER=sqlite
      - TINYAUTH_DATABASE_PATH=/data/tinyauth.db
      - TINYAUTH_RESOURCES_PATH=/data/resources
    volumes:
      - "./data:/data"
    read_only: true
    tmpfs:
      - /tmp:nodev,noexec,nosuid,size=32M
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "tinyauth", "healthcheck"]
      interval: 30s
      timeout: 5s
      start_period: 10s
      retries: 5
    labels:
      createdBy: "Apps"

networks:
  1panel-network:
    external: true