services:
  mirror-manager:
    build:
      context: .
      dockerfile: Dockerfile
      network: host
      args:
        BASE_IMAGE: docker.arvancloud.ir/library/python:3.12-slim-bookworm
        HTTP_PROXY: http://172.17.0.1:1081
        HTTPS_PROXY: http://172.17.0.1:1081
    container_name: mirror-manager
    restart: unless-stopped
    privileged: true
    pid: host
    environment:
      - SECRET_KEY=${SECRET_KEY:-change-me-in-production}
      - ADMIN_USERNAME=${ADMIN_USERNAME:-admin}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-change-me}
      - HOST_ROOT=/host
      - DATA_DIR=/app/data
      - ROLLBACK_MINUTES=${ROLLBACK_MINUTES:-15}
      - AUTO_TEST_INTERVAL_MINUTES=${AUTO_TEST_INTERVAL_MINUTES:-30}
    volumes:
      - /etc:/host/etc
      - /var/lib/mirror-manager/data:/app/data
      - /usr/bin/docker:/usr/bin/docker:ro
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - dokploy-network
    labels:
      - traefik.enable=true
      - traefik.docker.network=dokploy-network
      - traefik.http.routers.mirror-itistan.rule=Host(`mirror.itistan.ir`)
      - traefik.http.routers.mirror-itistan.entrypoints=websecure
      - traefik.http.routers.mirror-itistan.tls.certResolver=letsencrypt
      - traefik.http.services.mirror-itistan.loadbalancer.server.port=8765

networks:
  dokploy-network:
    external: true