# Optional read-only host identity inspection for a local/agent Dockwatch instance.
# Usage:
#   docker compose -f compose.yml -f examples/compose-host-identity.override.yml up -d
#
# This lets Dockwatch map container UID/GID to host accounts and inspect ownership
# of bind-mount sources. It does NOT allow Dockwatch to create host users.
services:
  dockwatch:
    environment:
      HOST_ROOT: /host
      ALLOW_HOST_USER_MANAGEMENT: "false"
      ALLOW_HOST_PERMISSION_MANAGEMENT: "false"
    volumes:
      - /:/host:ro