app:
  id: fedimint
  name: Fedimint
  version: 0.10.0
  description: Federated Bitcoin minting service with built-in Guardian UI. Privacy-preserving Bitcoin custody.
  
  container:
    image: fedimint/fedimintd:v0.10.0
    image_signature: cosign://...
    pull_policy: if-not-present
    
  dependencies:
    - app_id: bitcoin-core
      version: ">=24.0"
    - storage: 20Gi
    
  resources:
    cpu_limit: 4
    memory_limit: 4Gi
    disk_limit: 20Gi
    
  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: isolated
    apparmor_profile: fedimint
    
  ports:
    - host: 8173
      container: 8173
      protocol: tcp  # P2P
    - host: 8174
      container: 8174
      protocol: tcp  # API
    - host: 8175
      container: 8175
      protocol: tcp  # Built-in Guardian UI
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/fedimint
      target: /fedimint
      options: [rw]
      
  environment:
    - FM_DATA_DIR=/fedimint
    - FM_BITCOIND_URL=http://bitcoin-core:8332
    - FM_BITCOIND_USERNAME=${BITCOIN_RPC_USER}
    - FM_BITCOIND_PASSWORD=${BITCOIN_RPC_PASSWORD}
    - FM_BITCOIN_NETWORK=bitcoin
    - FM_BIND_UI=0.0.0.0:8175
    
  health_check:
    type: http
    endpoint: http://localhost:8175
    path: /
    interval: 30s
    timeout: 5s
    retries: 3
    
  bitcoin_integration:
    rpc_access: admin
    sync_required: true