services:
  relay:
    build:
      context: ../..
      dockerfile: deploy/collab-relay/Dockerfile
    restart: unless-stopped
    environment:
      OPENPENCIL_COLLAB_RELAY_LISTEN: 0.0.0.0:8091
      OPENPENCIL_COLLAB_RELAY_MAX_PENDING: "1024"
      OPENPENCIL_COLLAB_RELAY_MAX_AUTH_IN_FLIGHT: "128"
      OPENPENCIL_COLLAB_RELAY_MAX_ACTIVE: "10000"
      OPENPENCIL_COLLAB_RELAY_MAX_WAITING_PER_ROUTE: "4"
      OPENPENCIL_COLLAB_RELAY_QUEUE_CAPACITY: "32"
      OPENPENCIL_COLLAB_RELAY_MAX_QUEUED_BYTES: "67108864"
      OPENPENCIL_COLLAB_RELAY_MAX_QUEUED_BYTES_PER_ROUTE: "1048576"
      OPENPENCIL_COLLAB_RELAY_LOG_LEVEL: info
    expose:
      - "8091"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 256
    mem_limit: 512m