docker-compose.yml

services:
  packetview:
    build: .
    network_mode: host  # Access host network interfaces for packet capture
    user: "0:0"  # Run as root for tcpdump capabilities
    environment:
      - NODE_ENV=production
      - DISABLE_AUTO_CAPTURE=false  # Set to true to disable auto packet capture on startup
    cap_add:
      - NET_ADMIN
      - NET_RAW
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3001/health', (res) => { process.exit(res.statusCode === 200 ? 0 : 1) })"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  # Alternative: Run as non-root with setcap (uncomment to use)
  # packetview-nonroot:
  #   build: .
  #   network_mode: host
  #   environment:
  #     - NODE_ENV=production
  #     - DISABLE_AUTO_CAPTURE=true
  #   cap_add:
  #     - NET_ADMIN
  #     - NET_RAW
  #   restart: unless-stopped
  #   healthcheck:
  #     test: ["CMD", "node", "-e", "require('http').get('http://localhost:3001/health', (res) => { process.exit(res.statusCode === 200 ? 0 : 1) })"]
  #     interval: 30s
  #     timeout: 10s
  #     retries: 3
  #     start_period: 40s

  # Optional: nginx proxy for production
  # nginx:
  #   image: nginx:alpine
  #   ports:
  #     - "80:80"
  #     - "443:443"
  #   volumes:
  #     - ./nginx.conf:/etc/nginx/nginx.conf:ro
  #   depends_on:
  #     - packetview
  #   restart: unless-stopped