services:
  microwarp:
    image: "ghcr.io/ccbkkb/microwarp:0.3.1@sha256:d5b709efd49dbec3a965c617eb263b46cdf1449e65776d1b9a351927439b2b17"
    container_name: ${CONTAINER_NAME}
    labels:
      createdBy: "Apps"
    ports:
      - "${PANEL_APP_PORT_SOCKS5}:${BIND_PORT}"
    environment:
      - TZ=${TZ}
      - BIND_ADDR=0.0.0.0
      - BIND_PORT=${BIND_PORT}
      - ALLOW_NO_AUTH=${ALLOW_NO_AUTH:-1}
      - ROTATE_INTERVAL_MINUTES=${ROTATE_INTERVAL_MINUTES:-0}
      - ROTATE_MAX_ATTEMPTS=${ROTATE_MAX_ATTEMPTS:-5}
      - ROTATE_RETRY_DELAY_SECONDS=${ROTATE_RETRY_DELAY_SECONDS:-5}
      - TEST_URL=${TEST_URL}
      - IP_CHECK_URL=${IP_CHECK_URL:-https://cloudflare.com/cdn-cgi/trace}
      - SOCKS_USER=${SOCKS_USER:-}
      - SOCKS_PASS=${SOCKS_PASS:-}
      - ENDPOINT_IP=${ENDPOINT_IP:-}
      - GH_PROXY=${GH_PROXY:-}
      - TAILSCALE_CIDR=${TAILSCALE_CIDR:-100.64.0.0/10}
      - MTU=${MTU}
      - WARP_WGCF_CONF=${WARP_WGCF_CONF:-}
    cap_add:
      - NET_ADMIN
      - SYS_MODULE
    sysctls:
      - net.ipv4.conf.all.src_valid_mark=1
    volumes:
      - "${APP_DATA_DIR_1}:/etc/wireguard"
      - "./rotate.sh:/usr/local/bin/rotate.sh:ro"
    restart: always
    command: ["/bin/sh", "/usr/local/bin/rotate.sh"]
    networks:
      - 1panel-network

networks:
  1panel-network:
    external: true