services:
  app:
    image: ghcr.io/manyfold3d/manyfold-solo:latest
    volumes:
      # Uncomment to add a volume where a database file should be created.
      # Don't change the part after the colon, it needs to be at /config
      - ./config:/config
      # Uncomment to add a filesystem volume for your model library (or multiple if
      # you want multiple libraries), in the form <local_path>:<container_path>.
      # The local path could be a folder that already contains models, in which case Manyfold
      # will scan and import them, or it could be empty.
      # The container path can be anything; you will need to enter it in the "new library" form.
      - ./models:/models
    environment:
      SECRET_KEY_BASE: {{ vault_manyfold.secret_key }}
      MULTIUSER: enabled 
      OIDC_CLIENT_ID: {{ vault_manyfold.pocketid.client_id }}
      OIDC_CLIENT_SECRET: {{ vault_manyfold.pocketid.client_secret }}
      OIDC_ISSUER: https://{{ subdomains.pocketid }}
      OIDC_NAME: Pocket ID
      PUBLIC_HOSTNAME: {{ subdomains.models }}
      HTTPS_ONLY: enabled  # makes the OIDC callback URL https
      MAX_FILE_UPLOAD_SIZE: 5368709120
      PUID: 1000
      PGID: 1000
    extra_hosts:
      - "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}"
    labels:
      mag37.dockcheck.update: true
    restart: unless-stopped
    # Optional, but recommended for better security
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETUID
      - SETGID

networks:
  default:
    external: true
    name: "{{ docker.network_name }}"