services:
  imgproxy:
    image: "ghcr.io/imgproxy/imgproxy:latest"
    container_name: ${CONTAINER_NAME}
    restart: unless-stopped
    ports:
      - "${PANEL_APP_PORT_HTTP}:8080"
    environment:
      - IMGPROXY_KEY=${IMGPROXY_KEY}
      - IMGPROXY_SALT=${IMGPROXY_SALT}
      - IMGPROXY_ALLOWED_SOURCES=${IMGPROXY_ALLOWED_SOURCES}
      - IMGPROXY_ALLOW_PRIVATE_SOURCE_ADDRESSES=${IMGPROXY_ALLOW_PRIVATE_SOURCE_ADDRESSES}
      - IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES=false
      - IMGPROXY_ALLOW_LINK_LOCAL_SOURCE_ADDRESSES=false
      - IMGPROXY_IGNORE_SSL_VERIFICATION=false
    healthcheck:
      test:
        - CMD
        - imgproxy
        - health
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    networks:
      - 1panel-network
    labels:
      createdBy: "Apps"

networks:
  1panel-network:
    external: true