[Unit]
Description=Collabora Container
Requires=nginx-proxy.service
After=nginx-proxy.service

[Container]
Pod=nginx-proxy.pod
ContainerName=collabora
Image=docker.io/collabora/code:latest

# Enable auto-update container
AutoUpdate=registry
# pass this to attach it to container
Environment=extra_params="--o:ssl.enable=false --o:ssl.termination=true --o:net.post_allow.host[0]=160.202.39.[0-9]{1,3} --o:net.post_allow_host[1]=100.64.0.[0-9]{1,3} --o:per_document.max_concurrency=12 --o:num_prespawn_children=12 --o:net.frame_ancestors=${CLOUD}"
Environment=aliasgroup1=${CLOUD}:443
Environment=domain1=${CLOUD}:443
Environment=DONT_GEN_SSL_CERT=true
Environment=server_name=${HOST}

# capabilities
AddCapability=CAP_MKNOD

[Service]
# pass this to autofill above variables
EnvironmentFile=%h/.config/containers/systemd/collabora/.env
Restart=always
TimeoutStartSec=300

[Install]
WantedBy=default.target