services:
  redis:
    image: redis:7-alpine
    container_name: rspamd-redis
    restart: unless-stopped

    command:
      - redis-server
      - --appendonly
      - "yes"
      - --save
      - "900"
      - "1"
      - --save
      - "300"
      - "10"

    volumes:
      - ./redis:/data

    networks:
      - rspamd-internal

    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5

    security_opt:
      - no-new-privileges:true

    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  rspamd:
    image: rspamd/rspamd:latest
    container_name: rspamd
    restart: unless-stopped

    depends_on:
      redis:
        condition: service_healthy

    ports:
      - "127.0.0.1:11332:11332"
      - "127.0.0.1:11334:11334"

    volumes:
      - ./local.d:/etc/rspamd/local.d:ro
      - ./override.d:/etc/rspamd/override.d:ro
      - ./data:/var/lib/rspamd

    networks:
      - rspamd-internal
      - proxy

    security_opt:
      - no-new-privileges:true

    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

networks:
  rspamd-internal:
    internal: true

  proxy:
    external: true