services:
  dockmon:
    build:
      context: .
      dockerfile: docker/Dockerfile
    container_name: dockmon
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    ports:
      - "8001:443"   # HTTPS only - backend access through nginx proxy
    environment:
      - TZ=UTC
      - PYTHONPATH=/app/backend
      - PYTHONUNBUFFERED=1
    volumes:
      - dockmon_data:/app/data
      - /var/run/docker.sock:/var/run/docker.sock  # For local Docker monitoring (auto-configured on first run)
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    labels:
      - "com.dockmon.description=All-in-One Docker Container Monitor"
      - "com.dockmon.version=1.0"

volumes:
  dockmon_data:
    driver: local