# The chat server: docker compose up -d --build   (logs: docker compose logs -f, status: docker compose exec chat php app.php status)
# Settings in a .env file next to this one (never in git): CARAMAIL_PORT, CARAMAIL_ADMIN_KEY, CARAMAIL_SUPER_KEY, CARAMAIL_OWNER_IPS.
services:
  chat:
    build: .
    image: caramail-server:latest
    restart: unless-stopped
    environment:
      CARAMAIL_ADMIN_KEY: ${CARAMAIL_ADMIN_KEY:-}
      CARAMAIL_SUPER_KEY: ${CARAMAIL_SUPER_KEY:-}
      CARAMAIL_OWNER_IPS: ${CARAMAIL_OWNER_IPS:-}
    ports:
      - "${CARAMAIL_PORT:-4500}:4500"
    volumes:
      - chat-data:/data
    read_only: true
    tmpfs: [/tmp]
    cap_drop: [ALL]
    security_opt: ["no-new-privileges:true"]
    mem_limit: 256m
    pids_limit: 64

volumes:
  chat-data: