#!/bin/bash
# Ensure private Docker network exists and sql_server is connected
docker network create dash_net 2>/dev/null || true
docker network connect dash_net sql_server 2>/dev/null || true

docker rm -f dashback 2>/dev/null

docker run -d \
  --name dashback \
  --log-opt max-size=10m \
  --log-opt max-file=3 \
  --restart always \
  --network dash_net \
  --read-only \
  --tmpfs /tmp:rw,noexec,nosuid,size=512m \
  --tmpfs /run:rw,noexec,nosuid,size=16m \
  -u $(id -u):$(id -g) \
  -p 127.0.0.1:4211:4211 \
  -e HOST=0.0.0.0 \
  -e PORT=4211 \
  -e HTTPS_PORT=0 \
  -e MSSQL_SERVER=sql_server \
  -e HEALTH_MONITOR_ENABLED=false \
  -e SQLITE_PATH=/app/data/dash.db \
  -e STORAGE_DIR=/app/data/storage \
  -e BACKUP_DIR=/app/data/backups \
  -e GOOGLE_CLIENT_ID=928121624463-m9du45ek2d5f6p9cke8qpnf89ii9no20.apps.googleusercontent.com \
  -e JWT_SECRET=dfhjkswezui32476sdjkhvbn347865 \
  -e IMPLICIT_CREATE=true \
  -e VHOST_SETTINGS="" \
  -e DB_PROVIDER=mssql \
  -e MSSQL_DATABASE=dashback \
  -e MSSQL_USER=sa \
  -e MSSQL_PASSWORD=420Green \
  -e MSSQL_PORT=1433 \
  -e MSSQL_ENCRYPT=false \
  -e MSSQL_TRUST_SERVER_CERTIFICATE=false \
  -v "/home/ubuntu/src/docker/dashback_data:/app/data:rw" \
  -v "/home/ubuntu/src/docker/dashback/dist:/app/dist:ro" \
  -v "/home/ubuntu/src/docker/dashback/dist/dashback_current:/app/dist/dashback:ro" \
  dashback:latest