version: "3.9"

services:
  rpki-rtr:
    build:
      context: ../..
      dockerfile: deploy/server/Dockerfile
    image: rpki-rtr:latest
    container_name: rpki-rtr-tls
    restart: unless-stopped
    ports:
      - "323:323"
      - "324:324"
    environment:
      RPKI_RTR_ENABLE_TLS: "true"
      RPKI_RTR_ENABLE_SSH: "false"
      RPKI_RTR_TCP_ADDR: "0.0.0.0:323"
      RPKI_RTR_TLS_ADDR: "0.0.0.0:324"
      RPKI_RTR_TLS_CERT_PATH: "/app/certs/server-dns.crt"
      RPKI_RTR_TLS_KEY_PATH: "/app/certs/server-dns.key"
      RPKI_RTR_TLS_CLIENT_CA_PATH: "/app/certs/client-ca.crt"
      RPKI_RTR_DB_PATH: "/app/rtr-db"
      RPKI_RTR_CCR_DIR: "/app/data"
      RPKI_RTR_SLURM_DIR: "/app/slurm"
      RPKI_RTR_STRICT_CCR_VALIDATION: "false"
      RPKI_RTR_SOURCE_REFRESH_INTERVAL_SECS: "300"
      RUST_LOG: "info"
    volumes:
      - ../../data:/app/data:ro
      - ../../rtr-db:/app/rtr-db
      - ../../data:/app/slurm:ro
      - ../../tests/fixtures/tls:/app/certs:ro
      - ../../logs/server:/app/logs