services:
  webssh:
    build:
      context: .
      args:
        PYTHON_IMAGE: ${PYTHON_IMAGE:-docker.io/python:3.12-slim}
    restart: unless-stopped
    ports:
      - "8888:8888"
    environment:
      # extra wssh options, e.g. "--maxconn=50 --tdstream=172.18.0.1"
      WEBSSH_OPTS: ${WEBSSH_OPTS:-}
      # set this to keep saved passwords readable across container rebuilds
      # when the data volume is recreated; otherwise a secret is generated
      # in /data on first start
      WEBSSH_COOKIE_SECRET: ${WEBSSH_COOKIE_SECRET:-}
    volumes:
      - webssh-data:/data

volumes:
  webssh-data: