services:
  mitm-blockpage:
    build: .
    container_name: mitm-blockpage
    ports:
      - "${HOST_PORT:-443}:8443"
    environment:
      LISTEN_ADDR: 0.0.0.0
      LISTEN_PORT: 8443
      CA_CERT_PATH: /app/ssl/ca_cert.pem
      CA_KEY_PATH: /app/ssl/ca_key.pem
      BLOCK_PAGE_PATH: /app/webroot/block.html
      WEBROOT_DIR: /app/webroot
    volumes:
      - ca-data:/app/ssl
      - ./webroot:/app/webroot:ro
    healthcheck:
      test: ["CMD-SHELL", "wget --no-check-certificate -qO- https://127.0.0.1:8443/healthz >/dev/null || exit 1"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    restart: unless-stopped

volumes:
  ca-data: