name: liquidity-local
services:
  studio:
    build:
      context: ./liquidity-studio
    image: liquidity-studio:local
    restart: unless-stopped
    ports:
      - "127.0.0.1:${STUDIO_LOCAL_PORT:-3001}:8080"
    environment:
      PORT: "8080"
      NODE_ENV: ${STUDIO_NODE_ENV:-production}
      STUDIO_AUTH_MODE: ${STUDIO_AUTH_MODE:-google}
      AI_ALLOW_SYNTHETIC: ${AI_ALLOW_SYNTHETIC:-true}
      STUDIO_DATABASE_PATH: /data/studio.sqlite
      STUDIO_FIREBASE_PROJECT_ID: ${STUDIO_FIREBASE_PROJECT_ID:-}
      STUDIO_FIREBASE_API_KEY: ${STUDIO_FIREBASE_API_KEY:-}
      STUDIO_FIREBASE_AUTH_DOMAIN: ${STUDIO_FIREBASE_AUTH_DOMAIN:-}
      STUDIO_FIREBASE_APP_ID: ${STUDIO_FIREBASE_APP_ID:-}
      STUDIO_GOOGLE_FOUNDER_EMAIL: ${STUDIO_GOOGLE_FOUNDER_EMAIL:-}
      STUDIO_GOOGLE_MARKETER_EMAIL: ${STUDIO_GOOGLE_MARKETER_EMAIL:-}
    volumes:
      - studio-data:/data
    init: true
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    stop_grace_period: 15s
volumes:
  studio-data: