version: "3"
services:
  presidio-analyzer:
    # NOTE: image and tag must sync with the one in presidio.h
    image: synology/presidio-analyzer:0.5.4
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CAP_DAC_OVERRIDE
    environment:
      - LANG_CONF_FILE=/app/synology/languages-conf.yaml
      - PUBLIC_KEY_FILE=/app/synology/public_key
      - PYTHONPATH=/app/synology/site-packages
      - HOST=unix:///run/ai-console/presidio_analyzer.sock
      # The "--index-url" option for "pip install"
      - PIP_INDEX_URL=${PIP_INDEX_URL:-}
    volumes:
      - /run/ai-console:/run/ai-console
      - /var/packages/AIConsole/share/presidio-analyzer:/app/synology
      - /var/packages/AIConsole/share/key/pk:/app/synology/public_key:ro
    network_mode: bridge
    logging:
      driver: syslog
      options:
        syslog-address: "unixgram:///dev/log"
        tag: "synoai-presidio"
    secrets:
      - http_proxy
      - https_proxy

secrets:
  http_proxy:
    environment: "DSM_HTTP_PROXY"
  https_proxy:
    environment: "DSM_HTTPS_PROXY"