services:
  timelog:
    build:
      context: .
    image: timelog:latest
    container_name: timelog
    restart: unless-stopped

    environment:
      SITE_ADDRESS: ${SITE_ADDRESS:?set SITE_ADDRESS in .env}
      ACME_EMAIL: ${ACME_EMAIL:?set ACME_EMAIL in .env}
      TRUST_PROXY: ${TRUST_PROXY:?set TRUST_PROXY in .env}

    ports:
      - "${LISTEN_IP:-0.0.0.0}:80:80"
      - "${LISTEN_IP:-0.0.0.0}:443:443"
      - "${LISTEN_IP:-0.0.0.0}:443:443/udp"

    volumes:
      - ./caddy/data:/data
      - ./caddy/config:/config

  sync:
    build:
      context: .
      dockerfile: docker/Sync.Dockerfile
    restart: unless-stopped
    environment:
      SYNC_ORIGIN: https://${SITE_ADDRESS}
      SYNC_TRUST_PROXY: "1"
      SYNC_MAX_BYTES: ${SYNC_MAX_BYTES:-52428800}
      SYNC_MAX_VAULTS: ${SYNC_MAX_VAULTS:-10000}
    volumes:
      - sync-data:/data
    expose:
      - "3001"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

volumes:
  sync-data: