services:
  netfishing-server:
    build: .
    restart: unless-stopped
    init: true
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    ports:
      - "${NETFISHING_SERVER_PORT:-7777}:${NETFISHING_SERVER_PORT:-7777}/udp"
    environment:
      NETFISHING_SERVER_NAME: "${NETFISHING_SERVER_NAME:-NETfishing Dedicated Server}"
      NETFISHING_SERVER_BIND: "*"
      NETFISHING_SERVER_PORT: "${NETFISHING_SERVER_PORT:-7777}"
      NETFISHING_SERVER_MAX_PLAYERS: "${NETFISHING_SERVER_MAX_PLAYERS:-8}"
      NETFISHING_SERVER_PUBLIC: "${NETFISHING_SERVER_PUBLIC:-false}"
      NETFISHING_DISCOVERY_URL: "${NETFISHING_DISCOVERY_URL:-https://discovery.netfishing.org}"
      NETFISHING_DATA_DIR: /var/lib/netfishing-server
    volumes:
      - netfishing-server-data:/var/lib/netfishing-server
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m

volumes:
  netfishing-server-data: