# ThothII — deploy STANDALONE locale (dev / smoke test, senza portale).
# Rete propria + porte host per ispezione diretta.
#   docker compose -f docker-compose.dev.yml up -d --build
#   frontend: http://localhost:8090   backend: http://localhost:8787
name: thothii-dev

services:
  core:
    build:
      context: .
      dockerfile: docker/core.Dockerfile
    image: thothii-core:local
    env_file:
      - path: deploy/thothii.env
        required: false
    environment:
      HOST: 0.0.0.0
      PORT: "8787"
      THT_HARNESS_DIR: /app/harness
      THT_BIN: /opt/venv/bin/tht
      PI_BIN: pi
      AUTH_MODE: ${AUTH_MODE:-none}
      THT_SESSION_STORAGE: local
      THT_HOME: /data/local-home
      SETTINGS_FILE: /data/settings/settings.json
      THT_WORKSPACE_REGISTRY_ROOT: /data/workspace-registry
      THT_WORKSPACE_GIT_BRANCH: ${THT_WORKSPACE_GIT_BRANCH:-main}
      THT_WORKSPACE_INSTALLATION_ID: ${THT_WORKSPACE_INSTALLATION_ID:-local}
      THT_WORKSPACE_GIT_AUTHOR_NAME: ${THT_WORKSPACE_GIT_AUTHOR_NAME:-Thoth Workspace Registry}
      THT_WORKSPACE_GIT_AUTHOR_EMAIL: ${THT_WORKSPACE_GIT_AUTHOR_EMAIL:-thoth-workspace-registry@localhost}
      THT_WORKSPACE_SECRET_ROOTS: /run/secrets
      GIT_CONFIG_COUNT: "2"
      GIT_CONFIG_KEY_0: credential.helper
      GIT_CONFIG_VALUE_0: store --file=/run/secrets/workspace-registry-git-credentials
      GIT_CONFIG_KEY_1: http.sslCAInfo
      GIT_CONFIG_VALUE_1: /run/secrets/workspace-registry-git-ca
      GIT_SSH_COMMAND: ssh -i /run/secrets/workspace-registry-git-ssh-key -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=/run/secrets/workspace-registry-git-known-hosts
      MAX_PI_PROCESSES: ${MAX_PI_PROCESSES:-4}
    extra_hosts:
      - "host.docker.internal:host-gateway"
    volumes:
      - /home/chirone/thothii-data:/data
      - workspace-registry:/data/workspace-registry
      - /home/chirone/thothii-data/pi-config:/home/thoth/.pi
      - /home/chirone/chirone/etl/docs/evidence:/data/evidence:ro
      - ${THT_WORKSPACE_GIT_CREDENTIALS_FILE:-/dev/null}:/run/secrets/workspace-registry-git-credentials:ro
      - ${THT_WORKSPACE_GIT_CA_FILE:-/etc/ssl/certs/ca-certificates.crt}:/run/secrets/workspace-registry-git-ca:ro
      - ${THT_WORKSPACE_GIT_SSH_KEY_FILE:-/dev/null}:/run/secrets/workspace-registry-git-ssh-key:ro
      - ${THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE:-/dev/null}:/run/secrets/workspace-registry-git-known-hosts:ro
    ports:
      - "127.0.0.1:8787:8787"
    restart: "no"
    networks: [thothii-net]

  frontend:
    build:
      context: .
      dockerfile: docker/frontend.Dockerfile
      args:
        VITE_BASE: /
        VITE_BACKEND_URL: /api
    image: thothii-frontend:local
    ports:
      - "127.0.0.1:8090:8080"
    depends_on:
      - core
    restart: "no"
    networks: [thothii-net]

networks:
  thothii-net:
    driver: bridge

volumes:
  workspace-registry: