version: "3.7"

services:
  safetwitch-frontend:
    container_name: safetwitch-frontend
    hostname: safetwitch-frontend
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID
    restart: always
    image: safetwitch:arm64
    platform: "linux/arm64"
    ports:
      - "127.0.0.1:8280:80"
    environment:
      - SAFETWITCH_BACKEND_DOMAIN=twitch-api.seitan-ayoub.lol
      - SAFETWITCH_INSTANCE_DOMAIN=twitch.seitan-ayoub.lol
      - SAFETWITCH_HTTPS=true
      - SAFETWITCH_DEFAULT_LOCALE=en
      - SAFETWITCH_FALLBACK_LOCALE=en
    networks:
      - nginx_network

  safetwitch-backend:
    container_name: safetwitch-backend
    hostname: safetwitch-backend
    user: 65534:65534
    read_only: true
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    restart: always
    image: safetwitch-backend:arm64
    platform: "linux/arm64"
    networks:
      - nginx_network 
    ports:
      - "127.0.0.1:7100:7000"
    environment:
      - PORT=7000
      - URL=https://twitch-api.seitan-ayoub.lol
networks:
  nginx_network:
    external: true