version: '3.9'

# Node agent deployment for each VPN/proxy server.
# Usage: docker compose -f docker-compose.node.yml up -d

services:
  node:
    image: nexuma/node:latest
    container_name: nexuma-node
    restart: unless-stopped
    environment:
      PORT: 3001
      # URL of Core — must be reachable from this server
      CORE_URL: https://core.example.com
      CORE_GRPC_URL: core.example.com:3002
      # One-time registration code — generate in admin panel → Nodes
      # Remove this line after the node registers successfully
      REGISTRATION_CODE: paste-one-time-code-here
      HEARTBEAT_INTERVAL_SEC: 30
    volumes:
      - node_data:/var/lib/vpnnode
    ports:
      - "3001:3001"
      # Add protocol ports here, for example:
      # - "443:443"
      # - "443:443/udp"
    cap_add:
      - NET_ADMIN
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://localhost:3001/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 15s

volumes:
  node_data: