# See versions: https://github.com/matrix-construct/tuwunel/releases
# Configuration reference: https://github.com/matrix-construct/tuwunel/blob/main/tuwunel-example.toml

services:

  tuwunel_app:
    image: jevolk/tuwunel:v1.6.0
    container_name: tuwunel_app
    restart: unless-stopped
    user: "{{ owner_create_result.uid }}:{{ owner_create_result.group }}"
    networks:
      - "web_proxy_network"
    volumes:
      - "{{ data_dir }}:/var/lib/tuwunel"
    environment:
      TUWUNEL_SERVER_NAME: "{{ tuwunel_server_name }}"
      TUWUNEL_DATABASE_PATH: "/var/lib/tuwunel"
      TUWUNEL_ADDRESS: "0.0.0.0"
      TUWUNEL_PORT: "6167"
      TUWUNEL_MAX_REQUEST_SIZE: "20000000"

      TUWUNEL_ALLOW_REGISTRATION: "false"
      TUWUNEL_ALLOW_FEDERATION: "true"
      TUWUNEL_ALLOW_CHECK_FOR_UPDATES: "false"
      TUWUNEL_TRUSTED_SERVERS: '["matrix.org"]'

      # Well-known delegation values returned to clients/servers that query tuwunel directly.
      # The canonical delegation is served by Caddy on {{ tuwunel_server_name }} (see Caddyfile).
      TUWUNEL_WELL_KNOWN_SERVER: "{{ tuwunel_well_known_server }}"
      TUWUNEL_WELL_KNOWN_CLIENT: "{{ tuwunel_well_known_client }}"

      TUWUNEL_LOG: "info"

networks:
  web_proxy_network:
    external: true