# Copy docker/examples/daemon-all5.toml and set CONFIG_FILE to its absolute path.
# Examples use text logs and automatic TA certificate refresh; TALs stay local.
# Copy tals/*.tal and tals/*.constraints into INPUT_DIR; constraints default on.
# Edit the copied constraints, or set ta-constraints-enabled = false in TOML.
# See docs/docker.md for graceful stop and config reload.
services:
  validator:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: "${PANDA_RPKI_IMAGE:-panda-rpki:v0.1.0}"
    user: "${PUID:-1000}:${PGID:-1000}"
    read_only: true
    init: true
    restart: unless-stopped
    stop_grace_period: 40s
    tmpfs:
      - /tmp
    volumes:
      - ${CONFIG_FILE:?set CONFIG_FILE to an all-RIR daemon TOML file}:/config/daemon.toml:ro
      - ${INPUT_DIR:?set INPUT_DIR to the TAL directory (TA certificates optional)}:/input:ro
      - ${DAEMON_DIR:?set DAEMON_DIR to a writable dedicated directory}:/data
    command:
      - daemon
      - --config
      - /config/daemon.toml