services:
  cloudflare-ddns:
    image: timothyjmiller/cloudflare-ddns:latest
    container_name: cloudflare-ddns
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    network_mode: "host"
    # https://github.com/timothymiller/cloudflare-ddns#-quick-start
    environment:
      - CLOUDFLARE_API_TOKEN=${CLOUDFLARE_API_TOKEN:?Cloudflare API token is required}
      - DOMAINS=${DOMAINS:-}
      - IP4_DOMAINS=${IP4_DOMAINS:-}
      - IP6_DOMAINS=${IP6_DOMAINS:-}
      - IP4_PROVIDER=${IP4_PROVIDER:-cloudflare.trace}
      - IP6_PROVIDER=${IP6_PROVIDER:-none}
      - UPDATE_CRON=${UPDATE_CRON:-@every 5m}
      - UPDATE_ON_START=${UPDATE_ON_START:-true}
      - DELETE_ON_STOP=${DELETE_ON_STOP:-false}
      - DELETE_ON_FAILURE=${DELETE_ON_FAILURE:-true}
      - TTL=${TTL:-1} # 1=auto
      # to proxy only "dns.example.com" and "wfs.example.com" use "!is(dns.domain.com) && !is (wfs.domain.com)"
      - PROXIED=${PROXIED:-true}
      - EMOJI=${EMOJI:-true}
      - UPTIMEKUMA=${UPTIMEKUMA:-}
      - HEALTHCHECKS=${HEALTHCHECKS:-}
      - REJECT_CLOUDFLARE_IPS=${REJECT_CLOUDFLARE_IPS:-true}
      # volumes:
      # Prefer using environment variables for configuration, config.json legacy support
      # - ./config.json:/config.json