# 测试环境部署编排。正式口令不得写入本文件。
# 使用：复制 .env.example 为 .env 后填写，再执行 ./deploy.sh

services:
  caiwuzongzhang:
    build:
      context: ..
      dockerfile: deploy/Dockerfile
    image: caiwuzongzhang:test
    container_name: caiwuzongzhang-test
    ports:
      - "4173:4173"
    env_file:
      - .env
    environment:
      APP_HOST: "0.0.0.0"
      APP_PORT: "4173"
      APP_DB_PATH: /app/data/app.db
      APP_STORAGE_DIR: /app/data/files
    volumes:
      - ../data:/app/data
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    mem_limit: 512m
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:4173/', timeout=4)"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s