services:
  netalertx:
    container_name: netalertx

    image: "ghcr.io/jokob-sk/netalertx"    # ✔️ NOUVEAU
    #image: ghcr.io/jokob-sk/netalertx:v25.5.24

    network_mode: "host"

    restart: unless-stopped
    read_only: true

    cap_drop:
      - ALL
    cap_add:
      - NET_ADMIN
      - NET_RAW
      - NET_BIND_SERVICE

    volumes:
      - ./data:/data:rw
      - /etc/localtime:/etc/localtime:ro

    tmpfs:
      - "/tmp:uid=20211,gid=20211,mode=1700,rw,noexec,nosuid,nodev,async,noatime,nodiratime"

    environment:
      LISTEN_ADDR: 0.0.0.0
      PORT: 20211
      GRAPHQL_PORT: 20212

    mem_limit: 2048m
    mem_reservation: 1024m
    cpu_shares: 512
    pids_limit: 512

    logging:
      driver: "json-file"       # Use JSON file logging driver
      options:
        max-size: "10m"         # Rotate log files after they reach 10MB