# Optional addition to docker-compose.cdn-mm.yml. Run the exported installer first.
# Keep this file in every subsequent docker compose -f invocation.
services:
  netflow-agent:
    image: git.shx.one/denozord/mikrotikmanager-netflow-agent:${MM_NETFLOW_AGENT_IMAGE_TAG:-latest}
    container_name: mmapp-netflow-agent
    restart: unless-stopped
    network_mode: host
    cap_drop: [ALL]
    cap_add: [NET_ADMIN]
    security_opt: ["no-new-privileges:true"]
    read_only: true
    tmpfs: ["/tmp:rw,noexec,nosuid,size=8m"]
    volumes:
      - ./data/netflow-wireguard:/etc/wireguard
      - ./data/netflow-agent-socket:/run/mm-netflow-host
    logging:
      driver: json-file
      options: {max-size: "5m", max-file: "2"}
  backend:
    environment:
      FLOW_AGENT_SOCKET: /run/mm-netflow-host/agent.sock
    volumes:
      - ./data/netflow-agent-socket:/run/mm-netflow-host:ro
    depends_on:
      netflow-agent:
        condition: service_healthy