app:
  id: lnd
  name: Lightning Network Daemon
  version: 0.18.0
  description: Lightning Network implementation by Lightning Labs. Enables instant, low-cost Bitcoin payments.
  
  container:
    image: lightninglabs/lnd:v0.18.0
    image_signature: cosign://...
    pull_policy: verify-signature
    
  dependencies:
    - app_id: bitcoin-core
      version: ">=26.0"
    
  resources:
    cpu_limit: 2
    memory_limit: 1Gi
    disk_limit: 10Gi
    
  security:
    capabilities: [NET_BIND_SERVICE]
    readonly_root: true
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: isolated
    apparmor_profile: lnd
    
  ports:
    - host: 9735
      container: 9735
      protocol: tcp  # P2P
    - host: 10009
      container: 10009
      protocol: tcp  # gRPC
    - host: 8080
      container: 8080
      protocol: tcp  # REST
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/lnd
      target: /root/.lnd
      options: [rw]
      
  environment:
    - BITCOIND_HOST=bitcoin-core
    - BITCOIND_RPCUSER=${BITCOIN_RPC_USER}
    - BITCOIND_RPCPASS=${BITCOIN_RPC_PASSWORD}
    - NETWORK=mainnet
    
  health_check:
    type: http
    endpoint: http://localhost:8080
    path: /v1/getinfo
    interval: 30s
    timeout: 5s
    retries: 3
    
  bitcoin_integration:
    rpc_access: admin
    sync_required: true
    
  lightning_integration:
    channel_management: true
    payment_routing: true