name: grep-nest

services:
  app:
    image: ${APP_IMAGE:-ghcr.io/fanyang89/grep-nest:latest}
    platform: linux/amd64
    build:
      context: ./app
    environment:
      APP_LISTEN: 0.0.0.0:8080
      MCP_ALLOWED_HOSTS: ${MCP_ALLOWED_HOSTS:-}
      MCP_ALLOWED_ORIGINS: ${MCP_ALLOWED_ORIGINS:-}
      MCP_AUTH_TOKEN: ${MCP_AUTH_TOKEN:-}
      OPENGROK_AUTH_TOKEN: ${OPENGROK_AUTH_TOKEN:-}
      OPENGROK_PROJECTS: ${OPENGROK_PROJECTS:-}
      OPENGROK_REINDEX_TOKEN: ${OPENGROK_REINDEX_TOKEN:-}
      OPENGROK_REINDEX_URL: ${OPENGROK_REINDEX_URL:-}
      OPENGROK_URL: ${OPENGROK_URL:-http://opengrok:8080}
      RUST_LOG: ${RUST_LOG:-grep_nest=info,tower_http=info}
      SEARCH_MAX_FILES: ${SEARCH_MAX_FILES:-100}
      SEARCH_TIMEOUT_MS: ${SEARCH_TIMEOUT_MS:-2000}
    ports:
      - "${APP_PORT:-8080}:8080"
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:8080/healthz"]
      interval: 10s
      timeout: 3s
      retries: 5
    read_only: true
    tmpfs:
      - /tmp
    restart: unless-stopped