services:
  notify-gateway:
    build: .
    image: notify-gateway:local
    container_name: notify-gateway
    restart: unless-stopped
    environment:
      NOTIFY_GATEWAY_CONFIG: /app/config/config.yaml
      NOTIFY_GATEWAY_TOKEN: ${NOTIFY_GATEWAY_TOKEN:?set NOTIFY_GATEWAY_TOKEN in .env}
      TELEGRAM_BOT_TOKEN: ${TELEGRAM_BOT_TOKEN:-}
      TELEGRAM_NOTIFY_CHAT_ID: ${TELEGRAM_NOTIFY_CHAT_ID:-}
      WECOM_WEBHOOK_URLS: ${WECOM_WEBHOOK_URLS:-}
      TZ: ${TZ:-Asia/Singapore}
    volumes:
      - ./config:/app/config:ro
      - ./data:/app/data
      - ./logs:/app/logs
    ports:
      - "127.0.0.1:8770:8770"
    networks:
      - class-monitor
      - shared-services
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
    user: "10000:10000"
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

networks:
  class-monitor:
    external: true
    name: class-monitor
  shared-services:
    external: true
    name: ${SHARED_NETWORK_NAME:-shared-services}