# {{ ansible_managed }}
version: "3.8"
services:
  redlib:
    container_name: redlib
    image: quay.io/redlib/redlib:latest-arm
    security_opt:
      #- seccomp="seccomp-redlib.json"
      - no-new-privileges
    user: nobody
    read_only: true
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Asia/Singapore
      - RELIB_DEFAULT_THEME=black
      - REDLIB_DEFAULT_SHOW_NSFW=on
      - REDLIB_DEFAULT_BLUR_NSFW=off
      - REDLIB_DEFAULT_LAYOUT=card
      - REDLIB_DEFAULT_THEME=dark
      - REDLIB_SFW_ONLY=off
      # - REDLIB_BANNER=
      - REDLIB_ROBOTS_DISABLE_INDEXING=on
      - REDLIB_PUSHSHIFT_FRONTEND=undelete.pullpush.io
      # - RUST_LOG=redlib=trace #logging on the crate
      # - RUST_LOG=trace
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
      interval: 5m
      timeout: 3s
    ports:
      - 8882:8080
    networks:
      - redlib

networks:
  redlib:
    name: redlib