# Recommended for Linux VPS: newly-created listeners are available on the host
# without changing port mappings. Allow their TCP/UDP ports in your firewall.
# Run: docker compose up -d && docker compose logs 3m-ui
# The initial random administrator password appears once in the first-start log.
# Pin a version with THREE_M_UI_IMAGE=ghcr.io/<owner>/3m-ui:v1.2.3.
services:
  3m-ui:
    image: ${THREE_M_UI_IMAGE:-ghcr.io/kazeyukiro/3m-ui:latest}
    init: true
    restart: unless-stopped
    network_mode: host
    environment:
      THREE_M_UI_CONFIG: /etc/3m-ui/config.yaml
      TZ: ${TZ:-UTC}
    volumes:
      - 3m-ui-config:/etc/3m-ui
      # Includes selected/previous Mihomo cores; preserve across image updates.
      - 3m-ui-data:/var/lib/3m-ui
      - 3m-ui-logs:/var/log/3m-ui
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

volumes:
  3m-ui-config:
  3m-ui-data:
  3m-ui-logs: