name: metafeederarxiv

# =============================================================================
# MetaFeeder · arXiv — preprints for MetaMesh.
#
# Keyless: finds papers on arXiv and returns the records to the MetaGateway
# core, which stores + announces them. Split out of the former
# MetaFeeder · Papers app (one provider per app).
#
# It needs, over the shared `pcs` network:
#   - the **MetaGateway** app — which must list this feeder's URL
#     (`http://metafeederarxiv-feeder:8080`) in its feeders config so it gets discovered.
#     Discovery is startup-only, so restart the gateway afterwards.
#
# Everything is scoped under the `metafeederarxiv-*` prefix + the per-stack `metafeederarxiv` network +
# /DATA/AppData/metafeederarxiv/ data root, so it installs beside the other Meta* apps with
# zero collisions.
# =============================================================================

services:
  # ---------------------------------------------------------------------------
  # metafeederarxiv-feeder — the arxiv feeder. Keyless; no config needed.
  # ---------------------------------------------------------------------------
  metafeederarxiv-feeder:
    image: ghcr.io/worph/meta-feeder-arxiv:1.0.1
    cpu_shares: 30
    container_name: metafeederarxiv-feeder
    hostname: metafeederarxiv-feeder
    restart: unless-stopped
    user: "0:0"
    expose:
      - 8080
    environment:
      RUST_LOG: "info,meta_feeder=info"
      META_FEEDER_STATE_DIR: "/data/meta-feeder"
      TZ: "$TZ"
    volumes:
      # Persist feeder config.json + redb cache so it survives recreate.
      - ${DATA_ROOT:-/DATA}/AppData/metafeederarxiv/state:/data/meta-feeder:rw
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://localhost:8080/health"]
      interval: 5s
      timeout: 3s
      retries: 10
      start_period: 5s
    networks:
      - metafeederarxiv
      - pcs

  # ---------------------------------------------------------------------------
  # AppShield gate — the feeder's config page behind Yundera OIDC SSO.
  # container_name == subdomain prefix (the auth-registrar derives the client_id
  # from it). The gateway still reaches the feeder directly on `pcs`; index → /config.
  # ---------------------------------------------------------------------------
  metafeederarxiv:
    image: ghcr.io/yundera/appshield:2.0.9
    cpu_shares: 80
    container_name: metafeederarxiv
    hostname: metafeederarxiv
    restart: unless-stopped
    user: "0:0"
    expose:
      - 80
    environment:
      OIDC_REGISTRAR_URL: "http://auth-registrar:9092"
      REDIRECT_HOST_SUFFIXES: "${APP_DOMAIN},${APP_PUBLIC_IP_DASH}.nip.io,${APP_PUBLIC_IP_DASH}.sslip.io"
      BACKEND_HOST: "metafeederarxiv-feeder"
      BACKEND_PORT: "8080"
      LISTEN_PORT: "80"
    labels:
      caddy_0: metafeederarxiv-${APP_DOMAIN}
      caddy_0.import: gateway_tls
      caddy_0.reverse_proxy: "{{upstreams 80}}"
      caddy_1: metafeederarxiv-${APP_PUBLIC_IP_DASH}.nip.io
      caddy_1.import: gateway_tls
      caddy_1.reverse_proxy: "{{upstreams 80}}"
      caddy_2: metafeederarxiv-${APP_PUBLIC_IP_DASH}.sslip.io
      caddy_2.reverse_proxy: "{{upstreams 80}}"
    depends_on:
      - metafeederarxiv-feeder
    networks:
      - metafeederarxiv
      - pcs

networks:
  metafeederarxiv:
    name: metafeederarxiv
    driver: bridge
  pcs:
    name: ${APP_NET:-pcs}
    external: true

x-casaos:
  architectures:
    - amd64
    - arm64
  author: Worph Team
  category: Media
  developer: Aptero Team
  main: metafeederarxiv
  webui_port: 80
  index: /config

  description:
    en_us: |
      **arXiv for the MetaMesh network.**

      MetaFeeder · arXiv bridges open-access preprints from **arXiv** into MetaMesh.
      Keyless — no setup required.
      **Requires:** **MetaGateway** — its meta-core stores the resolved records and
      announces them to the swarm. The gateway must list this feeder in its config.
    fr_fr: |
      **arXiv pour le réseau MetaMesh.**

      MetaFeeder · arXiv connecte les prépublications en libre accès d'**arXiv** à
      MetaMesh. Sans clé ni configuration. **Nécessite** l'app **MetaGateway**.
  tagline:
    en_us: arXiv open-access preprints for MetaMesh
    fr_fr: Prépublications arXiv en libre accès pour MetaMesh

  title:
    en_us: MetaFeeder · arXiv

  icon: https://cdn.jsdelivr.net/gh/Worph/MetaAppStore@main/Apps/MetaFeederArxiv/icon.png
  thumbnail: https://cdn.jsdelivr.net/gh/Worph/MetaAppStore@main/Apps/MetaFeederArxiv/thumbnail.png

  store_app_id: metafeederarxiv
  is_uncontrolled: false

  tips:
    before_install:
      en_us: |
        **Install order:** install **MetaGateway** first (its meta-core stores and
        announces what this feeder finds).

        **After installing this app:** in **MetaGateway**, add this feeder from the
        dashboard's *Add a feeder* box — name `arxiv-feeder`, URL `http://metafeederarxiv-feeder:8080`.
        The gateway restarts itself: feeder discovery is startup-only.
        No other setup.
        **Authentication:** the config UI is protected by Yundera's Authelia (OIDC).

# Maison (Yundera dashboard) configuration. Read in preference to x-casaos.
# schema_version 2 is required for `folders`: an older Maison refuses the app
# outright rather than starting it without its directories.
x-compose-app:
  schema_version: 2
  # Created and chowned by Maison before any image is pulled, before any hook
  # runs and before the containers start — on the first boot and every one after.
  # Compose would otherwise create a missing bind source as a root-owned dir.
  folders:
    - path: /DATA/AppData/metafeederarxiv/state
      user: $PUID
      group: $PGID
  # Same string as the caddy_0 label, so the tile link and the route agree.
  webui-host: metafeederarxiv-${domain}
  webui-path: "/config"