services:
  objectstore:
    build: .
    image: lunarsky-objectstore:local
    restart: unless-stopped
    environment:
      S3_ACCESS_KEY: ${S3_ACCESS_KEY:?Set S3_ACCESS_KEY in .env}
      S3_SECRET_KEY: ${S3_SECRET_KEY:?Set S3_SECRET_KEY in .env}
      S3_BUCKET: ${S3_BUCKET:-objects}
      S3_REGION: ${S3_REGION:-us-east-1}
      MAX_OBJECT_BYTES: ${MAX_OBJECT_BYTES:-10485760}
      MAX_TOTAL_BYTES: ${MAX_TOTAL_BYTES:-2147483648}
    ports:
      - "127.0.0.1:${HOST_PORT:-9000}:9000"
    volumes:
      - object-data:/data
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:9000/health"]
      interval: 15s
      timeout: 3s
      retries: 3
      start_period: 10s
    mem_limit: 384m
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

volumes:
  object-data: