name: sample-app

x-image:
  namespace: ${IMAGE_NAMESPACE:-joafri}
  tag: ${IMAGE_TAG:-main}

services:
  app:
    image: ${IMAGE_NAMESPACE:-joafri}/sample-app-app:${IMAGE_TAG:-main}
    container_name: sample-app
    restart: unless-stopped

    environment:
      TZ: ${TZ}
      PUID: ${PUID}
      PGID: ${PGID}
      WEBUI_PORT: ${WEBUI_PORT:-8080}

    ports:
      - target: 8080
        published: ${WEBUI_PORT:-8080}
        protocol: tcp

    volumes:
      - type: bind
        source: /DATA/AppData/$AppID/config
        target: /config

    # Secure-by-default baseline. Relax only if appen kräver det.
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

    x-casaos:
      envs:
        - container: TZ
          description:
            en_US: Timezone, for example Europe/Stockholm
        - container: PUID
          description:
            en_US: User ID for filesystem permissions
        - container: PGID
          description:
            en_US: Group ID for filesystem permissions
      ports:
        - container: "8080"
          description:
            en_US: Web UI port
      volumes:
        - container: /config
          description:
            en_US: Application configuration directory

x-casaos:
  architectures:
    - amd64
    - arm64
  main: app
  category: Utilities
  author: Zima Apps Team
  developer: example
  icon: https://example.invalid/icon.png
  tagline:
    en_US: Replace with a short one-line value proposition
  description:
    en_US: Replace with a clear description of what the app does
  title:
    en_US: Sample App
  index: /
  port_map: ${WEBUI_PORT:-8080}