services:
  maestro-engine:
    image: maestro
    container_name: maestro
    ports:
      # Loopback-only default (dev is localhost anyway); see docker-compose.yaml
      - "127.0.0.1:8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "${XDG_DATA_HOME:-${HOME}}/.dcntrlized:/data/.dcntrlized"
      - "${HOME}:/host-home:ro"
    networks:
      - dcntrlized_net
    build:
      context: .
      dockerfile: Dockerfile.debug
    environment:
      - DCNTRLIZED_DEV=true
      - XDG_DATA_HOME=/data
      # Host path backing the data root, so Maestro's containerized start path
      # can produce bind-mount sources the daemon resolves on the host
      # namespace (identity injection for infra/peers).
      - DCNTRLIZED_HOST_DATA_ROOT=${XDG_DATA_HOME:-${HOME}}/.dcntrlized
      - DCNTRLIZED_GITEA_URL=${DCNTRLIZED_GITEA_URL:-http://192.168.122.183:3000}
      - GITEA_REGISTRY_RO_TOKEN=${GITEA_REGISTRY_RO_TOKEN}
      - GITEA_RW_PACKAGE_TOKEN=${GITEA_RW_PACKAGE_TOKEN}
      - GITEA_ORG=${GITEA_ORG:-Dcntrlized}
      - GITEA_USER=${GITEA_USER:-admin}
      - GIT_TOKEN=${GIT_TOKEN}
      - REGISTRY_USER=${REGISTRY_USER:-admin}

networks:
  dcntrlized_net:
    external: true