app:
  id: indeedhub
  name: IndeeHub
  version: 1.0.0
  description: Bitcoin documentary streaming platform featuring God Bless Bitcoin and other educational content about Bitcoin, sovereignty, and decentralized technology. Sign in with your Nostr identity.
  category: community

  container:
    image: 146.59.87.168:3000/lfg2025/indeedhub:1.0.0
    pull_policy: always  # Pull from registry; falls back to local build
    network: indeedhub-net

  dependencies:
    - storage: 1Gi

  resources:
    cpu_limit: 2
    memory_limit: 512Mi
    disk_limit: 1Gi

  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    user: 1001
    seccomp_profile: default
    network_policy: bridge
    apparmor_profile: default

  ports:
    - host: 7778
      container: 7777
      protocol: tcp  # Web UI. Port 7777 on the host is reserved for Nostr relay.

  volumes:
    - type: tmpfs
      target: /tmp
      options: [rw,noexec,nosuid,size=64m]
    - type: tmpfs
      target: /app/.next/cache
      options: [rw,noexec,nosuid,size=128m]
    - type: tmpfs
      target: /run
      options: [rw,nosuid,nodev,size=16m]
    - type: tmpfs
      target: /var/cache/nginx
      options: [rw,nosuid,nodev,size=32m]

  environment:
    - NODE_ENV=production
    - NEXT_TELEMETRY_DISABLED=1

  health_check:
    type: http
    endpoint: http://localhost:3000
    path: /
    interval: 30s
    timeout: 10s
    retries: 3
    start_period: 40s

  interfaces:
    main:
      name: Web UI
      description: Stream Bitcoin documentaries with Nostr identity
      type: ui
      port: 7778
      protocol: http
      path: /

  metadata:
    author: Indeehub Team
    icon: /assets/img/app-icons/indeedhub.png
    website: https://indeedhub.com
    repo: https://github.com/indeedhub/indeedhub
    license: MIT
    tags:
      - bitcoin
      - documentary
      - streaming
      - media
      - education
      - nostr