services:
  dashback:
    build:
      context: ..
      dockerfile: dashback/Dockerfile
    image: dashback:latest
    container_name: dashback
    read_only: true
    user: "${UID:-1000}:${GID:-1000}"
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=64m
      - /run:rw,noexec,nosuid,size=16m
    networks:
      - dash_net
    ports:
      - "127.0.0.1:4208:4208"
    environment:
      - HOST=0.0.0.0
      - PORT=4208
      - HTTPS_PORT=0
      - MSSQL_SERVER=sql_server
      - SQLITE_PATH=/app/data/dash.db
      - STORAGE_DIR=/app/data/storage
      - BACKUP_DIR=/app/data/backups
    # If a .env file is present, its values will be loaded:
    env_file:
      - path: .env
        required: false
    volumes:
      # Shared repo directory (read-only)
      - .:/app:ro
      # Writable data directory
      - ./data:/app/data:rw
      # Sibling repositories for local symlink resolution
      - ../dashdbschema:/dashdbschema:ro
      - ../llmorbiter:/llmorbiter:ro
    restart: unless-stopped

networks:
  dash_net:
    external: true