services:
  device-control-core:
    environment:
      DEVICE_EDGE_CHANNEL_ENABLED: "true"
      DEVICE_EDGE_CHANNEL_CORE_KEY_FILE: /run/nodedc-secrets/device-edge-channel/core-private-key.pem
      DEVICE_EDGE_CHANNEL_CORE_CERTIFICATE_FILE: /run/nodedc-secrets/device-edge-channel/core-certificate.pem
      DEVICE_EDGE_CHANNEL_TRUST_ROOT: /run/nodedc-secrets/device-edge-channel/peers
      DEVICE_EDGE_CHANNEL_MAX_EDGES: "32"
      DEVICE_EDGE_CHANNEL_RECONCILE_INTERVAL_MS: "15000"
    volumes:
      - type: bind
        source: /volume1/docker/nodedc-device-plane/secrets/device-edge-channel/core-private-key.pem
        target: /run/nodedc-secrets/device-edge-channel/core-private-key.pem
        read_only: true
        bind:
          create_host_path: false
      - type: bind
        source: /volume1/docker/nodedc-device-plane/secrets/device-edge-channel/core-certificate.pem
        target: /run/nodedc-secrets/device-edge-channel/core-certificate.pem
        read_only: true
        bind:
          create_host_path: false
      - type: bind
        source: /volume1/docker/nodedc-device-plane/secrets/device-edge-channel/peers
        target: /run/nodedc-secrets/device-edge-channel/peers
        read_only: true
        bind:
          create_host_path: false
    networks:
      - device-plane-egress

networks:
  device-plane-egress:
    name: nodedc-device-plane-egress
    driver: bridge
    internal: false