services:
  webmail:
    image: ghcr.io/bulwarkmail/webmail:latest
    ports:
      - "3000:3000"
    environment:
      - HOSTNAME=0.0.0.0 # Use "::" for IPv6
      - PORT=3000
    env_file:
      - .env.local
    volumes:
      # Encrypted user settings (SETTINGS_DATA_DIR).
      - bulwark-settings:/app/data/settings
      # Admin dashboard state: config, password hash, plugins, audit logs (ADMIN_DATA_DIR).
      - bulwark-admin:/app/data/admin
    healthcheck:
      test:
        [
          "CMD",
          "wget",
          "--no-verbose",
          "--tries=1",
          "--spider",
          "http://127.0.0.1:3000/api/health",
        ]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    restart: unless-stopped

volumes:
  bulwark-settings:
  bulwark-admin: