# Copy docker/examples/validate-all5.toml and set CONFIG_FILE to its absolute path.
# Examples use text logs and automatic TA certificate refresh; TALs stay local.
# Copy tals/*.tal and tals/*.constraints into INPUT_DIR; constraints default on.
# Edit the copied constraints, or set ta-constraints-enabled = false in TOML.
# See docs/docker.md for graceful stop and config reload.
services:
  validator:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: "${PANDA_RPKI_IMAGE:-panda-rpki:v0.1.0}"
    user: "${PUID:-1000}:${PGID:-1000}"
    read_only: true
    init: true
    tmpfs:
      - /tmp
    volumes:
      - ${CONFIG_FILE:?set CONFIG_FILE to an all-RIR validate TOML file}:/config/validate.toml:ro
      - ${INPUT_DIR:?set INPUT_DIR to the TAL directory (TA certificates optional)}:/input:ro
      - ${OUTPUT_DIR:?set OUTPUT_DIR to a writable output directory}:/output
      - ${STATE_DIR:?set STATE_DIR to a writable state directory}:/state
    command:
      - validate
      - --config
      - /config/validate.toml