version: '3.8'

services:
  stirling-pdf:
    image: frooodle/s-pdf:0.44.1  # Beispiel: stabile Version pinnen, nicht 'latest'
    container_name: stirling-pdf
    restart: unless-stopped
    ports:
      - "9080:8080"
    environment:
      # Nur wenn du wirklich zusätzliche Security-Features deaktivieren willst
      - DOCKER_ENABLE_SECURITY=${DOCKER_ENABLE_SECURITY}
      - TZ=${TIMEZONE}
    volumes:
      # Named Volumes für persistente Daten / Konfiguration
      - s-pdf-trainingData:/usr/share/tesseract-ocr/4.00/tessdata
      - s-pdf-extraConfigs:/configs
      - s-pdf-customFiles:/customFiles
    # Optional leichte Härtung
    security_opt:
      - no-new-privileges:true

volumes:
  s-pdf-trainingData:
  s-pdf-extraConfigs:
  s-pdf-customFiles: