# Intentionally outside apps/: this demo must never enter the public catalog.
# Use only a release-signed single-node-demo catalog and privately preloaded image.
# Never publish the private application image to a public registry.
app:
  id: node-demo-v4v
  name: V4V · Sovereign Music
  version: 0.6.7-alpha-archy2-private
  description: Listen to the original V4V demo catalog and explore sovereign music on this node.
  category: media
  container:
    image: localhost/v4v-demo:0.6.7-alpha-archy2-private@sha256:4f28702e4f85368e4ad886f06d58b38f869c560c90ca40487bfaebe69090a870
    generated_secrets:
      - name: node-demo-v4v-session
        kind: hex32
      - name: node-demo-v4v-receipts
        kind: hex32
    secret_env:
      - key: SESSION_SECRET
        secret_file: node-demo-v4v-session
      - key: RECEIPT_SIGNING_SECRET
        secret_file: node-demo-v4v-receipts
  resources:
    cpu_limit: 2
    memory_limit: 768Mi
  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    network_policy: bridge
  ports:
    - host: 7475
      container: 5181
      protocol: tcp
      bind: 127.0.0.1
      auth: gated
  volumes:
    - type: bind
      source: /var/lib/archipelago/app-support/node-demo-v4v/nostr-provider.js
      target: /app/vendor/archipelago-nostr-provider.js
      options: [ro]
    - type: volume
      source: node-demo-v4v-data
      target: /app/data
    - type: volume
      source: node-demo-v4v-media
      target: /app/media
    - type: tmpfs
      target: /tmp
      tmpfs_options: rw,noexec,nosuid,size=64m,mode=1777
  environment:
    - NODE_ENV=production
    - HOST=0.0.0.0
    - PORT=5181
    - PULSEWIRE_COMMIT=5a86558e
    - PULSEWIRE_PASSWORD_LOGIN=off
    - PULSEWIRE_PASSWORD_OPERATOR=off
    - PULSEWIRE_ARCHIPELAGO_SIGNER=on
    - PULSEWIRE_SECURE_COOKIES=off
    - PULSEWIRE_NOSTR_REGISTRATION=open
    - PULSEWIRE_STORE=json
    - PULSEWIRE_STATE_BACKUP_DIR=data/backups
    - PULSEWIRE_RATE_LIMIT_DB_FILE=data/rate-limits.db
    - PULSEWIRE_JOBS_DB_FILE=data/jobs.db
    - PULSEWIRE_FEED_INDEX_FILE=data/feed-index.db
    - PULSEWIRE_FEED_FRONTIER_FILE=data/feed-frontier.db
    - PULSEWIRE_LN_MODE=mock
    - PULSEWIRE_LOG_FORMAT=json
    - PULSEWIRE_ACCESS_LOG=on
    - PULSEWIRE_DISCOVERY_DEMO_FIXTURES=on
  health_check:
    type: http
    endpoint: http://127.0.0.1:5181
    path: /healthz
    interval: 30s
    timeout: 5s
    retries: 3
  interfaces:
    main:
      name: V4V
      description: Sovereign music demo
      type: ui
      port: 7475
      protocol: http
      path: /browse
  metadata:
    icon: /assets/img/app-icons/v4v-demo.svg
    author: V4V contributors
    tier: optional
    launch:
      requires_host_frame: true
      media_controls: archipelago-v1
    features:
      - Original demo song catalog
      - Background playback with dashboard controls
      - Demo payments only