app:
  id: btcpay-server
  name: BTCPay Server
  version: 1.12.0
  description: Self-hosted Bitcoin payment processor. Accept Bitcoin payments without intermediaries.
  
  container:
    image: btcpayserver/btcpayserver:1.12.0
    image_signature: cosign://...
    pull_policy: verify-signature
    
  dependencies:
    - app_id: bitcoin-core
      version: ">=26.0"
    - app_id: lnd
      version: ">=0.18.0"
    
  resources:
    cpu_limit: 2
    memory_limit: 2Gi
    disk_limit: 20Gi
    
  security:
    capabilities: [NET_BIND_SERVICE]
    readonly_root: true
    no_new_privileges: true
    user: 1000
    seccomp_profile: default
    network_policy: isolated
    apparmor_profile: btcpay
    
  ports:
    - host: 80
      container: 80
      protocol: tcp
    - host: 443
      container: 443
      protocol: tcp
    
  volumes:
    - type: bind
      source: /var/lib/archipelago/btcpay
      target: /datadir
      options: [rw]
      
  environment:
    - BTCPAY_NETWORK=mainnet
    - BTCPAY_CHAIN=btc
    - BTCPAY_BTCEXPLORERURL=http://bitcoin-core:8332
    - BTCPAY_LIGHTNING=type=lnd-rest;server=http://lnd:8080;allowinsecure=true
    
  health_check:
    type: http
    endpoint: http://localhost
    path: /health
    interval: 30s
    timeout: 5s
    retries: 3
    
  bitcoin_integration:
    rpc_access: read-only
    sync_required: true
    
  lightning_integration:
    payment_processing: true
    invoice_management: true