version: '3.8'

services:
  twingate:
    image: twingate/connector:latest
    container_name: twingate
    restart: unless-stopped
    network_mode: host
    environment:
      TWINGATE_NETWORK: ${TWINGATE_NETWORK:-}
      TWINGATE_ACCESS_TOKEN: ${TWINGATE_ACCESS_TOKEN:-}
      TWINGATE_REFRESH_TOKEN: ${TWINGATE_REFRESH_TOKEN:-}
    # NOTA: healthcheck desabilitado pois Twingate não expõe endpoint HTTP
    # O container é considered healthy mesmo sem resposta HTTP
    healthcheck:
      disable: true