services:
  ech0:
    image: ech0-cve-2026-35037:${ECH0_TAG:-4.2.1}
    build:
      context: .
      dockerfile: Dockerfile.ech0-lab
      args:
        ECH0_TAG: ${ECH0_TAG:-4.2.1}
    container_name: ech0-cve-2026-35037
    restart: unless-stopped
    environment:
      - JWT_SECRET=ech0-cve-2026-35037-local-lab
    ports:
      - "127.0.0.1:${ECH0_PORT:-6277}:6277"
    volumes:
      - ech0-data:/app/data
    depends_on:
      - evidence

  evidence:
    image: python:3.12-alpine
    container_name: ech0-cve-2026-35037-evidence
    restart: unless-stopped
    command: python3 -m http.server 8080 --bind 0.0.0.0 --directory /srv
    expose:
      - "8080"
    volumes:
      - ./evidence:/srv:ro

volumes:
  ech0-data: