name: rpki-explorer

# Standalone explorer stack: one container with nginx + rpki_query_service
# (+ rpki_query_indexer spawned by the service watcher). It mounts the soak
# run root and state db read-only and persists its query-db on the host so
# container/host restarts reuse the already-built index.

services:
  rpki-explorer:
    image: ${IMAGE_NAME:-rpki-explorer}:${IMAGE_TAG:-local}
    build:
      context: ../..
      dockerfile: deploy/rpki-explorer/Dockerfile
      args:
        GIT_REV: ${GIT_REV:-unknown}
    container_name: rpki-explorer
    restart: unless-stopped
    ports:
      # Loopback only: access via SSH port forwarding, e.g.
      #   ssh -L 9517:127.0.0.1:9517 root@<host>
      - "127.0.0.1:${LISTEN_PORT:-9517}:8080"
    environment:
      RETAIN_RUNS: "${RETAIN_RUNS:-10}"
      WATCH_INTERVAL_SECS: "${WATCH_INTERVAL_SECS:-10}"
    volumes:
      - "${SOAK_RUNS_DIR:?set SOAK_RUNS_DIR in .env}:/soak/runs:ro"
      - "${SOAK_DB_DIR:?set SOAK_DB_DIR in .env}:/soak/db:ro"
      - "${QUERY_DB_DIR:-./query-db}:/data"