services:
  redlib:
    image: quay.io/redlib/redlib:latest
    restart: always
    container_name: "redlib"
    ports:
      - 8080:8080 # Specify `127.0.0.1:8080:8080` instead if using a reverse proxy
    user: nobody
    read_only: true
    security_opt:
      - no-new-privileges:true
      # - seccomp=seccomp-redlib.json
    cap_drop:
      - ALL
    networks:
      - redlib
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
      interval: 5m
      timeout: 3s
    environment:
      - REDLIB_SFW_ONLY="${REDLIB_SFW_ONLY}"
      - REDLIB_ROBOTS_DISABLE_INDEXING="${REDLIB_ROBOTS_DISABLE_INDEXING}"
      - REDLIB_DEFAULT_THEME="${REDLIB_DEFAULT_THEME}"
      - REDLIB_DEFAULT_FRONT_PAGE="${REDLIB_DEFAULT_FRONT_PAGE}"
      - REDLIB_DEFAULT_LAYOUT="${REDLIB_DEFAULT_LAYOUT}"
      - REDLIB_DEFAULT_WIDE="${REDLIB_DEFAULT_WIDE}"
      - REDLIB_DEFAULT_POST_SORT="${REDLIB_DEFAULT_POST_SORT}"
      - REDLIB_DEFAULT_COMMENT_SORT="${REDLIB_DEFAULT_COMMENT_SORT}"
      - REDLIB_DEFAULT_BLUR_SPOILER="${REDLIB_DEFAULT_BLUR_SPOILER}"
      - REDLIB_DEFAULT_SHOW_NSFW="${REDLIB_DEFAULT_SHOW_NSFW}"
      - REDLIB_DEFAULT_BLUR_NSFW="${REDLIB_DEFAULT_BLUR_NSFW}"
      - REDLIB_DEFAULT_USE_HLS="${REDLIB_DEFAULT_USE_HLS}"
      - REDLIB_DEFAULT_HIDE_HLS_NOTIFICATION="${REDLIB_DEFAULT_HIDE_HLS_NOTIFICATION}"
      - REDLIB_DEFAULT_AUTOPLAY_VIDEOS="${REDLIB_DEFAULT_AUTOPLAY_VIDEOS}"
      - REDLIB_DEFAULT_HIDE_AWARDS="${REDLIB_DEFAULT_HIDE_AWARDS}"
      - REDLIB_DEFAULT_HIDE_SIDEBAR_AND_SUMMARY="${REDLIB_DEFAULT_HIDE_SIDEBAR_AND_SUMMARY}"
      - REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION="${REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION}"
      - REDLIB_DEFAULT_HIDE_SCORE="${REDLIB_DEFAULT_HIDE_SCORE}"
      - REDLIB_DEFAULT_FIXED_NAVBAR="${REDLIB_DEFAULT_FIXED_NAVBAR}"
      #- REDLIB_DEFAULT_SUBSCRIPTIONS="${REDLIB_DEFAULT_SUBSCRIPTIONS}"

networks:
  redlib: