# Standalone local registry example. Copy beside the clone as compose.workspace-registry.yaml
# and put path-only bindings in .env; keep the referenced files outside Git.
name: thothii-workspace-registry-local

services:
  core:
    image: thothii-core:local
    build:
      context: ../../..
      dockerfile: docker/core.Dockerfile
    environment:
      HOST: 0.0.0.0
      PORT: "8787"
      AUTH_MODE: none
      THT_SESSION_STORAGE: local
      THT_HOME: /data/local-home
      SETTINGS_FILE: /data/settings/settings.json
      THT_HARNESS_DIR: /app/harness
      THT_BIN: /opt/venv/bin/tht
      THT_WORKSPACE_REGISTRY_ROOT: /data/workspace-registry
      THT_WORKSPACE_GIT_REMOTE: ${THT_WORKSPACE_GIT_REMOTE:-ssh://git@git.example.invalid/platform/thoth-workspaces.git}
      THT_WORKSPACE_GIT_BRANCH: ${THT_WORKSPACE_GIT_BRANCH:-main}
      THT_WORKSPACE_INSTALLATION_ID: ${THT_WORKSPACE_INSTALLATION_ID:-local-laptop}
      THT_WORKSPACE_GIT_AUTHOR_NAME: ${THT_WORKSPACE_GIT_AUTHOR_NAME:-Thoth Workspace Registry}
      THT_WORKSPACE_GIT_AUTHOR_EMAIL: ${THT_WORKSPACE_GIT_AUTHOR_EMAIL:-thoth-workspace-registry@localhost}
      THT_WORKSPACE_SECRET_ROOTS: /run/secrets
      GIT_CONFIG_COUNT: "2"
      GIT_CONFIG_KEY_0: credential.helper
      GIT_CONFIG_VALUE_0: store --file=/run/secrets/workspace-registry-git-credentials
      GIT_CONFIG_KEY_1: http.sslCAInfo
      GIT_CONFIG_VALUE_1: /run/secrets/workspace-registry-git-ca
      GIT_SSH_COMMAND: ssh -i /run/secrets/workspace-registry-git-ssh-key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=/run/secrets/workspace-registry-git-known-hosts
    ports:
      - "127.0.0.1:8787:8787"
    volumes:
      - thoth-local-data:/data
      - workspace-registry:/data/workspace-registry
      - ${THT_WORKSPACE_GIT_CREDENTIALS_FILE:-./installation-secrets/git-credentials}:/run/secrets/workspace-registry-git-credentials:ro
      - ${THT_WORKSPACE_GIT_CA_FILE:-./installation-secrets/git-ca.pem}:/run/secrets/workspace-registry-git-ca:ro
      - ${THT_WORKSPACE_GIT_SSH_KEY_FILE:-./installation-secrets/git-ssh-key}:/run/secrets/workspace-registry-git-ssh-key:ro
      - ${THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE:-./installation-secrets/git-known-hosts}:/run/secrets/workspace-registry-git-known-hosts:ro
    restart: "no"

volumes:
  thoth-local-data: {}
  workspace-registry: {}