services:
  minecraft:
    image: itzg/minecraft-server:latest
    restart: unless-stopped
    environment:
      EULA: "TRUE"
      ENABLE_WHITELIST: "TRUE"
    volumes:
      - minecraft-data:/data

  log-viewer:
    build: .
    restart: unless-stopped
    depends_on:
      minecraft:
        condition: service_started
    read_only: true
    cap_drop: [ALL]
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:size=16m,mode=1777
    volumes:
      - minecraft-data:/data:ro
    environment:
      LISTEN_ADDR: 0.0.0.0:8080
      MC_DATA_DIR: /data
      MC_LOG_DIR: /data/logs
      MC_LATEST_LOG: /data/logs/latest.log
      MC_WHITELIST: /data/whitelist.json
      PUBLIC_ORIGIN: https://logs.example.com
      TRUST_PROXY: "true"
      TRUSTED_PROXY_CIDRS: 172.20.0.0/16
      CLIENT_IP_HEADER: X-Forwarded-For
      REDACT_PLAYER_IPS: "true"
      RUST_LOG: minecraft_log_viewer=info,tower_http=info
    networks:
      - default
      - caddy

volumes:
  minecraft-data:

networks:
  caddy:
    external: true