services:
  app:
    image: ghcr.io/manyfold3d/manyfold-solo:latest
    volumes:
      # Uncomment to add a volume where a database file should be created.
      # Don't change the part after the colon, it needs to be at /config
      - ./config:/config
      # Uncomment to add a filesystem volume for your model library (or multiple if
      # you want multiple libraries), in the form <local_path>:<container_path>.
      # The local path could be a folder that already contains models, in which case Manyfold
      # will scan and import them, or it could be empty.
      # The container path can be anything; you will need to enter it in the "new library" form.
      - ./models:/models
    environment:
      SECRET_KEY_BASE: {{manyfold_key}}
      MULTIUSER: enabled 
      OIDC_CLIENT_ID: {{ manyfold_oidc_client_id }}
      OIDC_CLIENT_SECRET: {{ manyfold_oidc_client_secret }}
      OIDC_ISSUER: https://auth.thesatelliteoflove.com/application/o/manyfold/
      OIDC_NAME: Authentik
      PUBLIC_HOSTNAME: models.thesatelliteoflove.com
      PUID: 1000
      PGID: 1000
    extra_hosts:
      - 'auth.thesatelliteoflove.com:172.20.0.5'
    labels:
      glance.name: Manyfold
      glance.icon: si:open3d
      glance.url: https://models.thesatelliteoflove.com/
      glance.description: STL Storage
    restart: unless-stopped
    # Optional, but recommended for better security
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETUID
      - SETGID

networks:
  default:
    external: true
    name: lava