services:
  sts-agent:
    image: gcr.io/cloud-ingest/tsop-agent:latest
    ulimits:
      memlock: 64000000
    volumes:
      - /mnt/ext-storage:/mnt/ext-storage:ro
      - /etc/sts-agent:/transfer_root/etc/sts-agent:ro
      - /var/lib/vault-cert/wif:/transfer_root/var/lib/vault-cert/wif:ro
    environment:
      GOOGLE_API_CERTIFICATE_CONFIG: /transfer_root/etc/sts-agent/certificate_config.json
    command:
      - --project-id=${PROJECT_ID}
      - --creds-file=/transfer_root/etc/sts-agent/cred.json
      - --hostname=${HOSTNAME}
      - --agent-pool=${STS_AGENT_POOL}