services:
  badblocks-personal-site:
    image: ${IMAGE_NAME}:latest
    restart: always
    container_name: badblocks-personal-site
    volumes:
      - ./db:/db
    env_file:
      - .env
    healthcheck:
      test:
        [
          "node",
          "-e",
          "fetch('http://localhost:4321/health').then(r=>process.exit(r.ok?0:1))",
        ]
      interval: 30s
      timeout: 15s
      retries: 3
      start_period: 120s
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    read_only: true
  wireguard:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    container_name: wireguard
    hostname: wireguard
    environment:
      - VPN_SERVICE_PROVIDER=custom
      - VPN_TYPE=wireguard
      - HTTPPROXY=on
    expose:
      - "8888"
    env_file:
      - .env
    devices:
      - /dev/net/tun:/dev/net/tun
    restart: unless-stopped
  #   healthcheck:
  #     test: ["CMD", "ping", "-c", "1", "-W", "3", "$$ANDROID_SMS_GATEWAY_IP"]
  #     interval: 30s
  #     timeout: 15s
  #     retries: 3
  #     start_period: 60s
networks:
  default:
    name: proxynet
    external: true