version: "3.8"

services:
  fusionfall:
    build:
      context: ../servers/openfusion
      dockerfile: Dockerfile
    container_name: fusionfall
    restart: unless-stopped
    ports:
      - "23000:23000/tcp"
      - "23001:23001/tcp"
    volumes:
      - ../servers/openfusion/data:/usr/src/app/data
      - ../servers/openfusion/tdata:/usr/src/app/tdata:ro
      - ../servers/openfusion/config.ini:/usr/src/app/config.ini
    environment:
      - SHARD_IP=${FUSIONFALL_SHARD_IP:-192.168.10.84}
      - MOTD=${FUSIONFALL_MOTD:-Bienvenido a Project Afterlife - FusionFall Academy}
      - ACCOUNT_LEVEL=${FUSIONFALL_ACCOUNT_LEVEL:-1}
    networks:
      - fusionfall
    # Aislamiento: sin acceso saliente a internet (red interna)
    # Los clientes locales se conectan via ports mapeados en el host
    sysctls:
      - net.ipv4.ip_unprivileged_port_start=23000
    healthcheck:
      test: ["CMD-SHELL", "ss -tln | grep -q ':23000' || exit 1"]
      interval: 30s
      timeout: 5s
      retries: 3

networks:
  fusionfall:
    driver: bridge
    internal: false