services:
  larkstack:
    build: .
    # image: ghcr.io/arcboxlabs/larkstack:latest
    container_name: larkstack
    restart: unless-stopped
    ports:
      # Admin UI + API + integration webhooks (/webhooks/<app>/) all on one port.
      - "8080:8080"
    environment:
      RUST_LOG: info
      # Optional: signing key for login sessions (else auto-persisted to the
      # data volume). Sign-in is Lark OAuth, configured under [console].
      # CONSOLE_SECRET: replace-me

      # Subsystem secrets (read by each subsystem's config loader). Anything
      # left unset is configurable from the UI's TOML editor instead.
      # LINEAR_WEBHOOK_SECRET: ...
      # LARK_APP_ID: ...
      # LARK_APP_SECRET: ...
    volumes:
      - larkstack-data:/data

volumes:
  larkstack-data: