# KiroGate - Docker Compose 配置
#
# 使用方法:
#   1. 复制 .env.example 为 .env 并配置
#   2. docker-compose up -d
#
# 或者直接传入环境变量:
#   PROXY_API_KEY=your-key REFRESH_TOKEN=your-token docker-compose up -d

services:
  kirogate:
    build: .
    container_name: kirogate
    restart: unless-stopped
    ports:
      - "8000:8000"
    environment:
      # 必填: 代理服务器密码
      - PROXY_API_KEY=${PROXY_API_KEY:-changeme}

      # 方式一: 使用 refresh token (推荐用于 Docker)
      - REFRESH_TOKEN=${REFRESH_TOKEN:-}

      # 方式二: 挂载凭证文件 (见下方 volumes)
      - KIRO_CREDS_FILE=${KIRO_CREDS_FILE:-}

      # 可选配置
      - PROFILE_ARN=${PROFILE_ARN:-}
      - KIRO_REGION=${KIRO_REGION:-us-east-1}
      - LOG_LEVEL=${LOG_LEVEL:-INFO}

      # 超时配置
      - FIRST_TOKEN_TIMEOUT=${FIRST_TOKEN_TIMEOUT:-45}
      - FIRST_TOKEN_MAX_RETRIES=${FIRST_TOKEN_MAX_RETRIES:-5}

      # 调试模式
      - DEBUG_MODE=${DEBUG_MODE:-off}

    # 如果使用凭证文件，取消下面的注释
    # volumes:
    #   - ~/.aws/sso/cache/kiro-auth-token.json:/app/credentials.json:ro
    # 然后设置 KIRO_CREDS_FILE=/app/credentials.json

    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s