services:
  vert:
    image: "ghcr.io/vert-sh/vert:sha-e1c83ba@sha256:6492f2a88e977e7ce82fd26f49028a17575fee8cac38604f585bc5773298cbc8"
    container_name: ${CONTAINER_NAME}
    restart: unless-stopped
    user: "101:101"
    read_only: true
    networks:
      - 1panel-network
    ports:
      - "${PANEL_APP_PORT_HTTP}:80"
    tmpfs:
      - /run:rw,noexec,nosuid,size=16m,uid=101,gid=101,mode=0755
      - /var/cache/nginx:rw,noexec,nosuid,size=32m,uid=101,gid=101,mode=0755
      - /tmp:rw,noexec,nosuid,size=16m,uid=101,gid=101,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    healthcheck:
      test: ["CMD", "curl", "--fail", "--silent", "--output", "/dev/null", "http://localhost/"]
      interval: 30s
      timeout: 10s
      start_period: 5s
      retries: 3
    labels:
      createdBy: "Apps"

networks:
  1panel-network:
    external: true