services:
  class-monitor:
    build: .
    image: class-qq-monitor:local
    container_name: class-qq-monitor
    restart: unless-stopped
    environment:
      CLASS_MONITOR_CONFIG: /app/config/config.yaml
      CLASS_MONITOR_DB: /app/data/messages.db
      NEWAPI_BASE_URL: ${NEWAPI_BASE_URL:?set NEWAPI_BASE_URL in .env}
      NEWAPI_API_KEY: ${NEWAPI_API_KEY:?set NEWAPI_API_KEY in .env}
      NOTIFY_GATEWAY_TOKEN: ${NOTIFY_GATEWAY_TOKEN:?set NOTIFY_GATEWAY_TOKEN in .env}
      ONEBOT_ACCESS_TOKEN: ${ONEBOT_ACCESS_TOKEN:?set ONEBOT_ACCESS_TOKEN in .env}
      TZ: ${TZ:-Asia/Singapore}
    volumes:
      - ./config:/app/config:ro
      - ./data:/app/data
      - ./logs:/app/logs
    ports:
      - "127.0.0.1:8765:8765"
    networks:
      - class-monitor
      - shared-services
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    user: "10000:10000"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

  napcat:
    image: mlikiowa/napcat-docker@sha256:1336a777f9a4f1f8cb89fef42f7548deacd3645919a067a50df5b66b5e77390e
    container_name: napcat
    restart: unless-stopped
    environment:
      TZ: ${TZ:-Asia/Singapore}
      NAPCAT_UID: "1000"
      NAPCAT_GID: "1000"
      ACCOUNT: ${ACCOUNT:?set ACCOUNT in .env}
      ONEBOT_ACCESS_TOKEN: ${ONEBOT_ACCESS_TOKEN:?set ONEBOT_ACCESS_TOKEN in .env}
      WEBUI_TOKEN: ${WEBUI_TOKEN:?set WEBUI_TOKEN in .env}
    ports:
      - "${NAPCAT_BIND_ADDRESS:-127.0.0.1}:6099:6099"
    volumes:
      - ./napcat/QQ:/app/.config/QQ
      - ./napcat/config:/app/napcat/config
    networks:
      - class-monitor

networks:
  class-monitor:
    name: class-monitor
  shared-services:
    external: true
    name: ${SHARED_NETWORK_NAME:-shared-services}