services:
  excellence:
    build: .
    image: ${EXCELLENCE_IMAGE:-excellence:0.1.0-rc.1}
    restart: unless-stopped
    init: true
    ports:
      - "${EXCELLENCE_BIND:-127.0.0.1}:${EXCELLENCE_PORT:-3210}:3210"
    environment:
      EXCELLENCE_PUBLIC_URL: ${EXCELLENCE_PUBLIC_URL:-}
      EXCELLENCE_ALLOWED_HOSTS: ${EXCELLENCE_ALLOWED_HOSTS:-}
      EXCELLENCE_SECURE_COOKIE: ${EXCELLENCE_SECURE_COOKIE:-false}
      EXCELLENCE_LLM_PROVIDERS: ${EXCELLENCE_LLM_PROVIDERS:-}
      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
      OPENAI_BASE_URL: ${OPENAI_BASE_URL:-}
      OPENAI_MODEL: ${OPENAI_MODEL:-gpt-4.1-mini}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
      ANTHROPIC_MODEL: ${ANTHROPIC_MODEL:-claude-sonnet-4-5}
      GEMINI_API_KEY: ${GEMINI_API_KEY:-}
      GEMINI_MODEL: ${GEMINI_MODEL:-gemini-2.5-flash}
      OLLAMA_BASE_URL: ${OLLAMA_BASE_URL:-}
      OLLAMA_MODEL: ${OLLAMA_MODEL:-qwen3.5:2b-q4_K_M}
      OLLAMA_NUM_THREAD: ${OLLAMA_NUM_THREAD:-2}
    volumes:
      - excellence-data:/data
      - ./backups:/backups
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    mem_limit: 1g
    cpus: 2
volumes:
  excellence-data: