# Expected outcome: Container starts successfully with proper run mount
# - NETALERTX_RUN shows as mounted and writable
# - No mount warnings since run directory can be non-persistent
# - Container starts normally with runtime files enabled
services:
  netalertx:
    network_mode: host
    build:
      context: ../../../
      dockerfile: Dockerfile
    image: netalertx-test
    container_name: netalertx-test-mount-run_mounted
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - NET_ADMIN
      - NET_RAW
      - NET_BIND_SERVICE
    environment:
      LISTEN_ADDR: 0.0.0.0
      PORT: 9999  # Use non-default port to test all paths
      APP_CONF_OVERRIDE: 20212
      ALWAYS_FRESH_INSTALL: true
      NETALERTX_DEBUG: 0
      SYSTEM_SERVICES_RUN: /tmp/run

    volumes:
      - type: volume
        source: netalertx_db
        target: /data/db
        read_only: false
      - type: volume
        source: netalertx_config
        target: /data/config
        read_only: false
      - type: volume
        source: test_system_services_run
        target: /tmp/run
        read_only: false
    tmpfs:
      - "/tmp/api:mode=1700,uid=20211,gid=20211,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
      - "/tmp/log:mode=1700,uid=20211,gid=20211,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
      - "/tmp/nginx/active-config:mode=1700,uid=20211,gid=20211,rw,noexec,nosuid,nodev,async,noatime,nodiratime"
volumes:
  netalertx_config:
  netalertx_db:
  test_netalertx_db:
  test_netalertx_config:
  test_netalertx_api:
  test_netalertx_log:
  test_system_services_run:
  test_system_services_active_config: