services:
  validator:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: panda-rpki:v0.1.0
    user: "${PUID:-1000}:${PGID:-1000}"
    read_only: true
    tmpfs:
      - /tmp
    volumes:
      - ${INPUT_DIR:?set INPUT_DIR to the TAL/TA directory}:/input:ro
      - ${OUTPUT_DIR:?set OUTPUT_DIR to a writable output directory}:/output
      - ${STATE_DIR:?set STATE_DIR to a writable state directory}:/state
    command:
      - validate
      - --tal
      - /input/${TAL_FILE:?set TAL_FILE}
      - --ta
      - /input/${TA_FILE:?set TA_FILE}
      - --rrdp-state-dir
      - /state
      - --rrdp-sync-mode
      - "${PANDA_RPKI_RRDP_SYNC_MODE:-auto}"
      - --ccr-out
      - /output/result.ccr
      - --out
      - /output