services:
  paperless-ai:
    # Local workspace build (default)
    build:
      context: .
      dockerfile: Dockerfile
    image: paperless-ai-next:local
    pull_policy: never
    
    # To use Docker Hub images instead, replace with:
    # image: admonstrator/paperless-ai-next:latest
    # or for full RAG image:
    # image: admonstrator/paperless-ai-next:latest-full
    
    container_name: paperless-ai-next
    network_mode: bridge
    restart: unless-stopped
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges=true
    environment:
      - PUID=1000
      - PGID=1000
      - PAPERLESS_AI_PORT=${PAPERLESS_AI_PORT:-3000}
      - LOG_LEVEL=${LOG_LEVEL:-info}
      - RAG_SERVICE_URL=http://localhost:8000
      - RAG_SERVICE_ENABLED=true
      # SECURITY: Required for initial setup via browser in Docker (host IP is not
      # 127.0.0.1 inside the container when using bridge networking). Remove this
      # variable or set it to 'no' immediately after completing initial setup.
      - ALLOW_REMOTE_SETUP=yes
      # Mistral OCR Queue (optional) – re-OCR poorly scanned documents
      # - MISTRAL_OCR_ENABLED=yes
      # - MISTRAL_API_KEY=your_key_here
      # - MISTRAL_OCR_MODEL=mistral-ocr-latest
      # Reconciliation (optional) – remove stale history entries for deleted documents
      # - RECONCILIATION_ENABLED=yes
      # - RECONCILIATION_INTERVAL=0 * * * *
    ports:
      - "3000:${PAPERLESS_AI_PORT:-3000}"
    volumes:
      - paperless-ai-next_data:/app/data

volumes:
  paperless-ai-next_data: