services:
  python-tools:
    container_name: python-tools
    image: git.ajpanton.se/ajp_anton/python-tools:3
    user: "${PYTHON_TOOLS_UID:-1000}:${PYTHON_TOOLS_GID:-1000}"
    ports:
      - "${PYTHON_TOOLS_PORT:-8080}:8080"
    environment:
      SERVER_MAINTENANCE_ALLOWED_PROXY_IPS: "${SERVER_MAINTENANCE_ALLOWED_PROXY_IPS:?Set the reverse proxy's direct peer address}"
      # Optional task settings. Only names listed here are forwarded to task
      # processes; keep credentials in the mounted credentials directory.
      # SERVER_MAINTENANCE_TASK_ENV: TASK_SETTING_A,TASK_SETTING_B
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - ${PYTHON_TOOLS_VOLUME_ROOT:?Set the persistent volume root}/state:/var/lib/server-maintenance
      - ${PYTHON_TOOLS_VOLUME_ROOT:?Set the persistent volume root}/tasks:/opt/tasks:ro
      - ${PYTHON_TOOLS_VOLUME_ROOT:?Set the persistent volume root}/credentials:/opt/credentials:ro
      # Add task-specific bind mounts here when required.
    restart: always