services:
  validator:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: "${PANDA_RPKI_IMAGE:-panda-rpki:v0.1.0}"
    user: "${PUID:-1000}:${PGID:-1000}"
    read_only: true
    init: true
    restart: unless-stopped
    stop_grace_period: 40s
    tmpfs:
      - /tmp
    volumes:
      - ${INPUT_DIR:?set INPUT_DIR to the TAL/TA directory}:/input:ro
      - ${DAEMON_DIR:?set DAEMON_DIR to a writable dedicated directory}:/data
    environment:
      PANDA_RPKI_LOG_LEVEL: "${PANDA_RPKI_LOG_LEVEL:-info}"
      PANDA_RPKI_LOG_FORMAT: "${PANDA_RPKI_LOG_FORMAT:-text}"
      PANDA_RPKI_LOG_PROGRESS_INTERVAL_SECS: "${PANDA_RPKI_LOG_PROGRESS_INTERVAL_SECS:-10}"
    command:
      - daemon
      - --state-root
      - /data
      - --interval-secs
      - "${PANDA_RPKI_INTERVAL_SECS:-60}"
      - --retain-runs
      - "${PANDA_RPKI_RETAIN_RUNS:-10}"
      - --run-timeout-secs
      - "${PANDA_RPKI_RUN_TIMEOUT_SECS:-0}"
      - --shutdown-grace-secs
      - "${PANDA_RPKI_SHUTDOWN_GRACE_SECS:-30}"
      - --
      - --tal
      - /input/${AFRINIC_TAL_FILE:?set AFRINIC_TAL_FILE}
      - --ta
      - /input/${AFRINIC_TA_FILE:?set AFRINIC_TA_FILE}
      - --tal-id
      - afrinic
      - --tal
      - /input/${APNIC_TAL_FILE:?set APNIC_TAL_FILE}
      - --ta
      - /input/${APNIC_TA_FILE:?set APNIC_TA_FILE}
      - --tal-id
      - apnic
      - --tal
      - /input/${ARIN_TAL_FILE:?set ARIN_TAL_FILE}
      - --ta
      - /input/${ARIN_TA_FILE:?set ARIN_TA_FILE}
      - --tal-id
      - arin
      - --tal
      - /input/${LACNIC_TAL_FILE:?set LACNIC_TAL_FILE}
      - --ta
      - /input/${LACNIC_TA_FILE:?set LACNIC_TA_FILE}
      - --tal-id
      - lacnic
      - --tal
      - /input/${RIPE_TAL_FILE:?set RIPE_TAL_FILE}
      - --ta
      - /input/${RIPE_TA_FILE:?set RIPE_TA_FILE}
      - --tal-id
      - ripe
      - --parallel-phase2-object-workers
      - "${PANDA_RPKI_WORKERS:-8}"
      - --parallel-max-repo-sync-workers-global
      - "${PANDA_RPKI_REPO_WORKERS:-8}"
      - --parallel-phase2-worker-queue-capacity
      - "${PANDA_RPKI_WORKER_QUEUE_CAPACITY:-256}"
      - --parallel-repo-worker-queue-capacity
      - "${PANDA_RPKI_REPO_QUEUE_CAPACITY:-256}"
      - --http-timeout-secs
      - "${PANDA_RPKI_HTTP_TIMEOUT_SECS:-600}"