app:
  id: botfights
  name: BotFights
  version: 1.2.1
  description: Bot competition arena with 2-player arcade fighting mode. AI bots battle in trivia challenges while humans duke it out with controllers. Built for Bitcoiners.
  category: community

  container:
    image: 146.59.87.168:3000/lfg2025/botfights:1.2.1
    pull_policy: always
    # Auto-generated on first install (random hex, 0600, rootless-owned). The
    # 1.2.x image's server/src/middleware/jwt.ts throws at module import when
    # JWT_SECRET is unset and NODE_ENV=production, so a fresh install without
    # this crash-loops immediately. hex32 (not base64, unlike netbird) because
    # jwt.ts uses the value directly as an HMAC key with no decode step.
    generated_secrets:
      - name: botfights-jwt-secret
        kind: hex32
    secret_env:
      - key: JWT_SECRET
        secret_file: botfights-jwt-secret

  dependencies:
    - storage: 500Mi

  resources:
    cpu_limit: 2
    memory_limit: 512Mi
    disk_limit: 500Mi

  security:
    capabilities: []
    readonly_root: true
    no_new_privileges: true
    user: 1001
    seccomp_profile: default
    network_policy: bridge
    apparmor_profile: default

  ports:
    - host: 9100
      container: 9100
      protocol: tcp  # Web UI + API

  volumes:
    - type: bind
      source: botfights-data
      target: /app/server/data
    - type: tmpfs
      target: /tmp
      options: [rw,noexec,nosuid,size=64m]

  environment:
    - NODE_ENV=production
    - PORT=9100
    # Default-on shared public arena federation (BOT-03/D-03): this node's
    # BotFights becomes a thin client of the Foundation's well-known arena —
    # all nodes see all fighters, fights cross nodes. This is a rendezvous,
    # not an authority: any node can host its own arena (same image, just
    # without this var set), and an operator can remove this line entirely to
    # run a fully standalone, node-local arena instead.
    - ARENA_UPSTREAM_URL=https://botfights.archipelago-foundation.org

  health_check:
    type: http
    endpoint: http://localhost:9100
    path: /api/health
    interval: 30s
    timeout: 10s
    retries: 3
    start_period: 30s

  interfaces:
    main:
      name: Web UI
      description: Bot arena and arcade fighter with controller support
      type: ui
      port: 9100
      protocol: http
      path: /

  metadata:
    author: Dorian
    repo: https://botfights.net
    icon: /assets/img/app-icons/botfights.svg
    license: MIT
    tags:
      - bitcoin
      - gaming
      - arcade
      - fighter
      - bots
      - competition
      - controller