services:
  mcp: # optional API on port 65002; enable with PACKMATE_MCP_ENABLED=true and a token
    build:
      context: ./mcp
    image: registry.gitlab.com/packmate/packmate/mcp:${BUILD_TAG:-latest}
    network_mode: host
    restart: unless-stopped
    mem_limit: 512m
    cpus: 1.0
    pids_limit: 64
    read_only: true
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    environment:
      PACKMATE_MCP_ENABLED: ${PACKMATE_MCP_ENABLED:-false}
      PACKMATE_MCP_TOKEN: ${PACKMATE_MCP_TOKEN:-}
      PACKMATE_MCP_BIND: ${PACKMATE_MCP_BIND:-127.0.0.1}
      PACKMATE_MCP_PORT: ${PACKMATE_MCP_PORT:-65002}
      PACKMATE_MCP_ALLOWED_HOSTS: ${PACKMATE_MCP_ALLOWED_HOSTS:-127.0.0.1:*,localhost:*,[::1]:*}
      PACKMATE_MCP_JOB_TIMEOUT_SECONDS: ${PACKMATE_MCP_JOB_TIMEOUT_SECONDS:-30}
      PACKMATE_MCP_JOB_MAX_MIB: ${PACKMATE_MCP_JOB_MAX_MIB:-32}
      PACKMATE_PUBLIC_URL: ${PACKMATE_PUBLIC_URL:-http://127.0.0.1:65000}
      PACKMATE_BACKEND_URL: http://127.0.0.1:65000
      PACKMATE_WEB_LOGIN: ${PACKMATE_WEB_LOGIN:-BinaryBears}
      PACKMATE_WEB_PASSWORD: ${PACKMATE_WEB_PASSWORD:-123456}
    depends_on:
      packmate:
        condition: service_started
  packmate: # port = 65000
    environment:
      DB_PASSWORD: ${PACKMATE_DB_PASSWORD:-K604YnL3G1hp2RDkCZNjGpxbyNpNHTRb}
      INTERFACE: ${PACKMATE_INTERFACE:-}
      LOCAL_IP: ${PACKMATE_LOCAL_IP}
      MODE: ${PACKMATE_MODE:-LIVE}
      PCAP_FILE: ${PACKMATE_PCAP_FILE:-}
      WEB_LOGIN: ${PACKMATE_WEB_LOGIN:-BinaryBears}
      WEB_PASSWORD: ${PACKMATE_WEB_PASSWORD:-123456}
      CAPTURE_WORKERS: ${PACKMATE_CAPTURE_WORKERS:-1}
      CAPTURE_QUEUE_CAPACITY: ${PACKMATE_CAPTURE_QUEUE_CAPACITY:-250000}
      CAPTURE_BUFFER_SIZE_BYTES: ${PACKMATE_CAPTURE_BUFFER_SIZE_BYTES:-67108864}
      CAPTURE_SHUTDOWN_TIMEOUT_SECONDS: ${PACKMATE_CAPTURE_SHUTDOWN_TIMEOUT_SECONDS:-30}
      OLD_STREAMS_CLEANUP_ENABLED: ${PACKMATE_OLD_STREAMS_CLEANUP_ENABLED:-true}
      OLD_STREAMS_CLEANUP_INTERVAL_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_INTERVAL_SECONDS:-10}
      OLD_STREAMS_CLEANUP_MAX_RUN_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_RUN_SECONDS:-5}
      OLD_STREAMS_CLEANUP_COMMIT_GRACE_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_COMMIT_GRACE_SECONDS:-120}
      OLD_STREAMS_CLEANUP_THRESHOLD: ${PACKMATE_OLD_STREAMS_CLEANUP_THRESHOLD:-15}
      OLD_STREAMS_CLEANUP_BATCH_SIZE: ${PACKMATE_OLD_STREAMS_CLEANUP_BATCH_SIZE:-500}
      OLD_STREAMS_CLEANUP_MAX_BATCHES_PER_RUN: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_BATCHES_PER_RUN:-20}
      OLD_STREAMS_CLEANUP_MAX_PACKETS_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_PACKETS_PER_BATCH:-20000}
      OLD_STREAMS_CLEANUP_MAX_MATCHES_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_MATCHES_PER_BATCH:-20000}
      OLD_STREAMS_CLEANUP_MAX_BYTES_PER_BATCH: ${PACKMATE_OLD_STREAMS_CLEANUP_MAX_BYTES_PER_BATCH:-67108864}
      OLD_STREAMS_CLEANUP_STATEMENT_TIMEOUT_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_STATEMENT_TIMEOUT_SECONDS:-5}
      OLD_STREAMS_CLEANUP_LOCK_TIMEOUT_SECONDS: ${PACKMATE_OLD_STREAMS_CLEANUP_LOCK_TIMEOUT_SECONDS:-1}
    env_file:
      - .env
    container_name: packmate-app
    stop_grace_period: ${PACKMATE_CONTAINER_STOP_GRACE_PERIOD:-45s}
    build:
      context: .
      dockerfile: docker/Dockerfile_app
    network_mode: "host"
    image: registry.gitlab.com/packmate/packmate:${BUILD_TAG:-latest}
    volumes:
      - "./pcaps/:/app/pcaps/:ro"
      - "./rsa_keys/:/app/rsa_keys/:ro"
    depends_on:
      db:
        condition: service_healthy
  db: # port = 65001
    container_name: packmate-db
    command:
      - postgres
      - -c
      - autovacuum_max_workers=4
      - -c
      - autovacuum_naptime=10s
      - -c
      - autovacuum_vacuum_threshold=1000
      - -c
      - autovacuum_vacuum_scale_factor=0.02
      - -c
      - autovacuum_analyze_scale_factor=0.05
      - -c
      - autovacuum_vacuum_cost_limit=1000
    environment:
      POSTGRES_USER: packmate
      POSTGRES_PASSWORD: ${PACKMATE_DB_PASSWORD:-K604YnL3G1hp2RDkCZNjGpxbyNpNHTRb}
      POSTGRES_DB: packmate
    env_file:
      - .env
    volumes:
    - "./data/postgres_data:/var/lib/postgresql/data"
    - "./docker/postgresql.conf:/tmp/postgresql.conf:ro"
    - "./docker/update_db_config.sh:/docker-entrypoint-initdb.d/_update_db_config.sh:ro"
    network_mode: "host"
    image: postgres:15.2
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U packmate -p 65001" ]
      interval: 2s
      timeout: 5s
      retries: 15