services:
  evofirewall:
    # evofw и evofirewall — один образ (алиас для drop-in).
    image: git.shx.one/denozord/evofw:latest
    restart: unless-stopped
    environment:
      DATABASE_URL: sqlite:/data/app.db
      SERVER_PORT: "8080"
      AUTH_REQUIRED: "true"
      AUTH_JWT_SECRET: ${AUTH_JWT_SECRET}
      AUTH_ISSUER: https://auth.shnt.top
      AUTH_PORTAL_URL: https://auth.shnt.top
      PUBLIC_BASE_URL: https://fw.example.com
      EVOFW_ENROLL_SEED: ${EVOFW_ENROLL_SEED}
      STATIC_DIR: /app/static
    volumes:
      - evofw-data:/data
    ports:
      - "8080:8080"

volumes:
  evofw-data: