services:
  ai-gateway-service:
    build:
      context: .
      dockerfile: Dockerfile
    env_file:
      - path: .env
        required: false
    environment:
      AI_GATEWAY_SERVICE_HOST: 0.0.0.0
      AI_GATEWAY_SERVICE_PORT: 3100
      PME_ENTERPRISE_AUTH_ENABLED: "true"
      PME_AUTH_TOKEN: ${PME_AUTH_TOKEN:-}
    ports:
      - "127.0.0.1:3100:3100"
    init: true
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m
    volumes:
      - gateway-data:/app/.data
      - gateway-service-data:/app/apps/ai-gateway-service/.data
    healthcheck:
      test:
        - CMD
        - node
        - -e
        - >-
          fetch("http://127.0.0.1:3100/health/check").then((response) => {
          if (!response.ok) process.exit(1);
          }).catch(() => process.exit(1));
      interval: 10s
      timeout: 3s
      retries: 12
      start_period: 5s

volumes:
  gateway-data:
  gateway-service-data: