#!/bin/sh
set -eu

docker run -d \
  --name "${STRM_CONTAINER_NAME:-leelaa-strm}" \
  --pull never \
  --restart unless-stopped \
  --user "${PUID:-$(id -u)}:${PGID:-$(id -g)}" \
  --network "${STRM_DOCKER_NETWORK:-bridge}" \
  --publish "${STRM_BIND_ADDRESS:-127.0.0.1}:${STRM_HTTP_PORT:-8690}:8690" \
  --mount "type=bind,source=${STRM_DATA_DIR:-$(pwd)/data},target=/data" \
  --mount "type=bind,source=${STRM_OUTPUT_DIR:-$(pwd)/media},target=/media" \
  --mount "type=bind,source=${STRM_MACHINE_ID_FILE:-/etc/machine-id},target=/run/host/machine-id,readonly" \
  --read-only \
  --tmpfs /tmp:rw,noexec,nosuid,size=16m \
  --cap-drop ALL \
  --security-opt no-new-privileges:true \
  --stop-timeout 20 \
  leelaa-strm:local