# Internet Use Control — Control Service (own image, own container, own port).
# Deploy on .13:  cd /home/sam/paseo/projects/internet_use_control && docker compose up -d --build
# The service is the single source of truth (SYSTEM_MAP.md). Only it publishes config.

name: webrestrict

services:
  control:
    build:
      context: .
      args:
        VERSION: "0.2.0-phase2"
    image: webrestrict/control:0.2.0-phase2
    container_name: webrestrict-control
    restart: unless-stopped
    env_file:
      - environment.d/control-service.env
    ports:
      - "8791:8791"
    volumes:
      - webrestrict-data:/data
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://127.0.0.1:8791/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  webrestrict-data: