services:
  rmm-server:
    build:
      context: .
      dockerfile: Dockerfile
    environment:
      RMM_ADDR: ":8080"
      RMM_DB_PATH: /data/rmm.db
      RMM_WEB_DIR: /app/web
      RMM_ENROLLMENT_TOKEN: "${RMM_ENROLLMENT_TOKEN:-dev-enroll-token}"
      RMM_OPERATOR_TOKEN: "${RMM_OPERATOR_TOKEN:-dev-operator-token}"
      RMM_OPERATOR_USERNAME: "${RMM_OPERATOR_USERNAME:-admin}"
      RMM_OPERATOR_PASSWORD: "${RMM_OPERATOR_PASSWORD:-dev-operator-password}"
      RMM_SESSION_SECRET: "${RMM_SESSION_SECRET:-dev-session-secret-change-me}"
      RMM_COOKIE_SECURE: "${RMM_COOKIE_SECURE:-false}"
      RMM_TUNNEL_HTTP_HOST: tunnel-ssh
      RMM_TUNNEL_KEY_PATH: "${RMM_TUNNEL_KEY_PATH:-./secrets/router_tunnel_key.pub}"
    ports:
      - "${RMM_HTTP_BIND_IP:-0.0.0.0}:${RMM_HTTP_PORT:-18080}:8080"
    volumes:
      - rmm-data:/data
    restart: unless-stopped

  tunnel-ssh:
    build:
      context: ./deploy/tunnel
    ports:
      - "${RMM_TUNNEL_BIND_IP:-0.0.0.0}:${RMM_TUNNEL_SSH_PORT:-2222}:22"
      - "${RMM_TUNNEL_BIND_IP:-0.0.0.0}:22000-22099:22000-22099"
    volumes:
      - tunnel-data:/data
      - "${RMM_TUNNEL_KEY_PATH}:/bootstrap/router_tunnel_key.pub:ro"
    restart: unless-stopped

volumes:
  rmm-data:
  tunnel-data: