# Fresh installs: paste this file into a Portainer Docker Standalone stack.
# Configure the site address and connected apps in Magent's setup wizard.
# No Dockerfile, source checkout, .env file or shared default password is needed.
# Existing installations must keep their original data mount and keys.
services:
  magent:
    image: rephl3xnz/magent:latest
    ports:
      # LAN access by default. Restrict with a firewall; use HTTPS for public use.
      # Only the frontend is published; it also serves /api.
      - "3000:3000"
    volumes:
      # Contains the database, settings, cache and private generated keys.
      - magent-data:/app/data
    restart: unless-stopped
    stop_grace_period: 30s
    # For security, leave these settings unchanged unless you understand the risks.
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    init: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m,uid=1000,gid=1000
      - /app/frontend/.next/cache:rw,noexec,nosuid,size=128m,uid=1000,gid=1000

volumes:
  magent-data: