app:
  id: strfry
  name: Strfry Nostr Relay
  version: 0.9.0
  description: Lightweight Nostr relay written in C++. Alternative to nostr-rs-relay with lower resource usage.
  
  container:
    image: strfry/strfry:latest
    image_signature: cosign://...
    pull_policy: verify-signature
    
  dependencies:
    - storage: 5Gi
    
  resources:
    cpu_limit: 1
    memory_limit: 512Mi
    disk_limit: 5Gi
    
  security:
    capabilities: []
    readonly_root: true
    network_policy: isolated
    apparmor_profile: nostr-relay
    
  ports:
    - 8080:8080  # HTTP/WebSocket
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/strfry
      target: /strfry
      options: [rw]
      
  environment:
    - RELAY_NAME=Archipelago Strfry Relay
    
  health_check:
    type: http
    endpoint: http://localhost:8080
    path: /health
    interval: 30s
    timeout: 5s
    retries: 3
    
  nostr_integration:
    relay_type: public
    monetization_enabled: true