version: '3.8'

services:
  torsentinel:
    build: .
    container_name: torsentinel
    ports:
      - "8443:8443"   # Dashboard
    environment:
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - SENTINEL_SECRET_KEY=${SENTINEL_SECRET_KEY:-}
      - TOR_CONTROL_PASSWORD=sentinel
    volumes:
      - ./evidence:/app/evidence
      - ./workspace:/app/workspace
      - torsentinel-db:/app/data
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

volumes:
  torsentinel-db: