name: magent-beta

services:
  magent:
    build:
      context: .
      dockerfile: Dockerfile
    env_file:
      - ./.env
    environment:
      APP_NAME: Magent Beta
      CORS_ALLOW_ORIGIN: https://beta.grizzlyflix.co.nz
      MAGENT_APPLICATION_URL: https://beta.grizzlyflix.co.nz
      MAGENT_API_URL: https://beta.grizzlyflix.co.nz/api
      AUTH_COOKIE_NAME: magent_beta_auth
      AUTH_STATE_COOKIE_NAME: magent_beta_logged_in
      AUTH_COOKIE_DOMAIN: beta.grizzlyflix.co.nz
      AUTH_COOKIE_SECURE: "true"
      AUTH_COOKIE_SAMESITE: strict
      SQLITE_PATH: /app/data/magent.db
      LOG_FILE: /app/data/magent.log
      SITE_BANNER_ENABLED: "true"
      SITE_BANNER_MESSAGE: "Beta environment"
      SITE_BANNER_TONE: warning
    ports:
      - "${BETA_FRONTEND_BIND:-10.30.1.32}:3100:3000"
      - "127.0.0.1:8100:8000"
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    read_only: true
    cap_drop: ["ALL"]
    security_opt: ["no-new-privileges:true"]
    init: true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m,uid=1000,gid=1000
      - /app/frontend/.next/cache:rw,noexec,nosuid,size=128m,uid=1000,gid=1000