services:
  openvas:
    image: immauss/openvas:latest
    container_name: openvas
    restart: unless-stopped
    labels:
      # Watchtower pulled a new major that forced a pg_upgrade crash-loop
      # (212 restarts, 2026-07-13); update OpenVAS deliberately instead
      - "com.centurylinklabs.watchtower.enable=false"
    environment:
      - PASSWORD=${OPENVAS_PASSWORD}
      - USERNAME=${OPENVAS_USERNAME}
    volumes:
      - openvas-db:/data/database
      - openvas-var-lib:/data/var-lib
      - openvas-local-share:/data/local-share
      - openvas-local-etc:/data/local-etc
      - openvas-var-log:/data/var-log
    ports:
      - "9392:9392"
    mem_limit: 6G
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "3"

volumes:
  openvas-db:
    driver: local
  openvas-var-lib:
    driver: local
  openvas-local-share:
    driver: local
  openvas-local-etc:
    driver: local
  openvas-var-log:
    driver: local