version: "3.9"
services:
  shard:
    image: greencoast/shard:stable
    build:
      context: .
    container_name: greencoast-shard
    restart: unless-stopped
    ports:
      - "8080:8080"
      - "8081:8081"
    environment:
      - GC_DEV_ALLOW_UNAUTH=false
      - GC_SIGNING_SECRET_HEX=92650f92d67d55368c852713a5007b90d933bff507bc77c980de7bf5442844ca
    volumes:
      - gc_data:/var/lib/greencoast
      - ./configs/shard.sample.yaml:/app/shard.yaml:ro
      - ./client:/app/client:ro
    user: "65532:65532"  # distroless nonroot
volumes:
  gc_data: