services:
  validator:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: panda-rpki:v0.1.0
    user: "${PUID:-1000}:${PGID:-1000}"
    read_only: true
    init: true
    restart: unless-stopped
    stop_grace_period: 40s
    tmpfs:
      - /tmp
    volumes:
      - ${INPUT_DIR:?set INPUT_DIR to the TAL/TA directory}:/input:ro
      - ${DAEMON_DIR:?set DAEMON_DIR to a writable dedicated directory}:/data
    environment:
      PANDA_RPKI_LOG_LEVEL: "${PANDA_RPKI_LOG_LEVEL:-info}"
      PANDA_RPKI_LOG_FORMAT: "${PANDA_RPKI_LOG_FORMAT:-json}"
    command:
      - daemon
      - --state-root
      - /data
      - --interval-secs
      - "${PANDA_RPKI_INTERVAL_SECS:-60}"
      - --retain-runs
      - "${PANDA_RPKI_RETAIN_RUNS:-10}"
      - --run-timeout-secs
      - "${PANDA_RPKI_RUN_TIMEOUT_SECS:-0}"
      - --shutdown-grace-secs
      - "30"
      - --
      - --tal
      - /input/${TAL_FILE:?set TAL_FILE}
      - --ta
      - /input/${TA_FILE:?set TA_FILE}
      - --parallel-max-repo-sync-workers-global
      - "${PANDA_RPKI_REPO_WORKERS:-8}"
      - --parallel-phase2-object-workers
      - "${PANDA_RPKI_WORKERS:-8}"