# {{ ansible_managed }}
services:
  dashboard:
    image: "{{ netbird_coordinator__dashboard_image }}"
    container_name: netbird-dashboard
    restart: unless-stopped
    env_file: [./dashboard.env]
    networks: [boma]
    # Cap json logs — Docker's default driver never rotates. Interim until ADR-018
    # (Alloy log shipping) lands; consider back-porting this to reverse_proxy too.
    logging:
      driver: json-file
      options: {max-size: "500m", max-file: "2"}
  netbird-server:
    image: "{{ netbird_coordinator__server_image }}"
    container_name: netbird-server
    restart: unless-stopped
    command: ["--config", "/etc/netbird/config.yaml"]
    environment:
      # Disable geolocation so a no-egress startup can't FATAL the control plane
      # (FRICTION 2026-06-17 #4). boma uses no geo posture (ACL Allow-All).
      NB_DISABLE_GEOLOCATION: "{{ netbird_coordinator__disable_geolocation | string | lower }}"
    ports:
      - "3478:3478/udp"
    volumes:
      - netbird_data:/var/lib/netbird
      - ./config.yaml:/etc/netbird/config.yaml:ro
    networks: [boma]
    logging:
      driver: json-file
      options: {max-size: "500m", max-file: "2"}
volumes:
  netbird_data:
networks:
  boma:
    external: true
    name: boma