version: '3.8'

services:
  mikrotik-bot:
    image: registry:5000/mikrotik-bot:latest
    container_name: mikrotik-bot-production
    restart: unless-stopped
    environment:
      # Production Vault AppRole credentials
      - VAULT_ADDR=http://vault:8200
      - VAULT_ROLE_ID=b8248e4d-d22a-1f7e-37f0-b2e0c36679cd
      - VAULT_SECRET_ID=5c6982ea-cdb1-94ce-0261-685852f36531
      - VAULT_SECRET_PATH=kv/data/mikrotik-bot
      - DATABASE_PATH=/app/data/bot.db
    volumes:
      - mikrotik_bot_data:/app/data
    ports:
      - "8008:8000"  # Health check endpoint
    networks:
      - proxmox-services
      - bot-network
    depends_on:
      - watchtower
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
      
  # Автоматические обновления
  watchtower:
    image: containrrr/watchtower
    container_name: watchtower-mikrotik
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - WATCHTOWER_POLL_INTERVAL=60
      - WATCHTOWER_LABEL_ENABLE=true
      - WATCHTOWER_CLEANUP=true
    command: --interval 60 --label-enable --cleanup
    networks:
      - proxmox-services
      - bot-network
      
networks:
  proxmox-services:
    external: true
  bot-network:
    driver: bridge
    
volumes:
  mikrotik_bot_data: