version: "3.7"

services:
  app_proxy:
    environment:
      APP_HOST: netbird_web_1
      APP_PORT: 80

  app:
    image: ghcr.io/netbirdio/netbird:0.70.0-rootless@sha256:b1487a94f432aa706275ebbbbdff3605bf927b056d63855f3d43966cb68c64dc
    restart: on-failure
    user: "1000:1000"
    cap_add:
      - NET_ADMIN
      - SYS_ADMIN
      - SYS_RESOURCE
    network_mode: host
    volumes:
      - ${APP_DATA_DIR}/data/app_data:/var/lib/netbird:rw

  web:
    image: nginx:1.27@sha256:124b44bfc9ccd1f3cedf4b592d4d1e8bddb78b51ec2ed5056c52d3692baebc19
    restart: on-failure
    volumes:
      - ${APP_DATA_DIR}/data/www:/usr/share/nginx/html:ro