app:
  id: home-assistant
  name: Home Assistant
  version: 2024.1.0
  description: Open source home automation platform. Control and monitor your smart home devices.
  
  container:
    image: homeassistant/home-assistant:2024.1
    image_signature: cosign://...
    pull_policy: if-not-present
    
  dependencies:
    - storage: 10Gi
    
  resources:
    cpu_limit: 2
    memory_limit: 2Gi
    disk_limit: 10Gi
    
  security:
    capabilities: [NET_BIND_SERVICE]
    readonly_root: false  # Home Assistant needs write access
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: host  # Requires host network for device discovery
    apparmor_profile: home-assistant
    
  ports:
    - host: 8123
      container: 8123
      protocol: tcp  # Web UI
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/home-assistant
      target: /config
      options: [rw]
    - type: bind
      source: /var/run/dbus
      target: /var/run/dbus
      options: [ro]
      
  devices:
    - /dev/ttyUSB0  # Serial devices
    - /dev/ttyACM0  # USB devices
    
  environment:
    - TZ=UTC
    - PUID=1000
    - PGID=1000
    
  health_check:
    type: http
    endpoint: http://localhost:8123
    path: /
    interval: 30s
    timeout: 5s
    retries: 3