services:
  wikideck:
    build:
      context: .
      target: runtime
    ports:
      # Keep the prototype private; listen on all interfaces only inside the container.
      - "127.0.0.1:${WIKIDECK_PORT:-3001}:3001"
    environment:
      WIKIDECK_NETWORK: testnet
      PUBLIC_ORIGIN: "${PUBLIC_ORIGIN:-http://127.0.0.1:${WIKIDECK_PORT:-3001}}"
      WIKIDECK_PEERS: "${WIKIDECK_PEERS:-}"
      WIKIDECK_ALLOW_PRIVATE_PEERS: "${WIKIDECK_ALLOW_PRIVATE_PEERS:-0}"
      WIKIDECK_PAYMENT_MODE: mock
      WIKIDECK_MARKET_RUNTIME_ENABLED: "${WIKIDECK_MARKET_RUNTIME_ENABLED:-0}"
      WIKIDECK_MARKET_ENABLED: "${WIKIDECK_MARKET_ENABLED:-1}"
      WIKIDECK_MARKET_TRADING_ENABLED: "${WIKIDECK_MARKET_TRADING_ENABLED:-1}"
      WIKIDECK_MARKET_HOST_FEE_ADDRESS: "${WIKIDECK_MARKET_HOST_FEE_ADDRESS:-44xHcCdFhW4b951yBHpkTPdLSJ85qTCnFQ8N7m96TtqqRL3dbhzbEH4fe2SJ3a6ESHcNyzCYH5nYJ9ActR1JtkeA7QYGbQv}"
      WIKIDECK_MARKET_FEE_BPS: "${WIKIDECK_MARKET_FEE_BPS:-250}"
      WIKIDECK_MARKET_CONFIRMATIONS: "${WIKIDECK_MARKET_CONFIRMATIONS:-10}"
    volumes:
      - wikideck-data:/app/data
    init: true
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp:size=32m,mode=1777,noexec,nosuid
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 128
    mem_limit: 1g
    cpus: 1.0
    stop_grace_period: 30s

volumes:
  wikideck-data: