services:
  docksentinel:
    build: .
    container_name: docksentinel
    ports:
      - "5050:5000"
    environment:
      - FLASK_ENV=production
      - DATABASE_URL=sqlite:////data/docksentinel.db
      - RUNTIME_LOCK_PATH=/data/runtime.lock
      - START_COORDINATOR=true
      - DOCKER_HOST=unix:///var/run/docker.sock
      - CLI_BACKENDS_DIR=/app/llm-backends
      - SECRET_KEY=${SECRET_KEY:?Set SECRET_KEY in your shell or .env before running docker compose}
      - PYTHONUNBUFFERED=1
    volumes:
      - docksentinel_data:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro
    # Makes the default LLM URL (http://host.docker.internal:11434/v1 → Ollama on
    # the host) resolve on Linux/Unraid; Docker Desktop already provides it.
    extra_hosts:
      - "host.docker.internal:host-gateway"
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://localhost:5000/api/health"]
      interval: 30s
      timeout: 5s
      start_period: 15s
      retries: 3
    restart: unless-stopped

volumes:
  docksentinel_data: