# Dev environment: `docker compose up` builds the app with hot reload (air) and
# mounts your host repositories in (AGENT.md §1.6). Because the app operates on
# repos that live on the host, the roots are mounted read-write.

services:
  app:
    build:
      context: .
      target: dev
    env_file: .env
    environment:
      # Bind all interfaces INSIDE the container so the published port reaches
      # it; the `ports` mapping below still keeps it localhost-only on the HOST.
      - LISTEN_ADDR=0.0.0.0:8080
      # HTTPS for the MCP connector (Claude Desktop only accepts https URLs).
      # Certs are generated on the host with mkcert (see README/.env.example)
      # and mounted read-only below.
      - HTTPS_ADDR=0.0.0.0:8443
      - TLS_CERT_FILE=/app/certs/localhost.pem
      - TLS_KEY_FILE=/app/certs/localhost-key.pem
      # The scanner looks here; matches the volume mount below.
      - GIT_REPO_ROOTS=/repos
    ports:
      - "127.0.0.1:8080:8080"
      - "127.0.0.1:8443:8443"
    volumes:
      # Source, for hot reload.
      - .:/app
      # Cache the Go module + build cache across restarts.
      - gomod:/go/pkg/mod
      # Your repositories. Set REPOS_HOST_PATH in .env (or your shell) to the
      # host folder that holds them; defaults to ./repos next to this file.
      - "${REPOS_HOST_PATH:-./repos}:/repos"
      # --- Optional: let git authenticate to remotes from inside the container.
      # Uncomment ONE approach and adjust for your host (AGENT.md §1.6, §11):
      #   SSH agent socket (Linux/macOS):
      # - "${SSH_AUTH_SOCK}:/ssh-agent"
      #   or mounted keys (read-only):
      # - "${HOME}/.ssh:/root/.ssh:ro"
    # environment for the SSH-agent option:
    # environment:
    #   - SSH_AUTH_SOCK=/ssh-agent

volumes:
  gomod: