services:
  agent:
    image: ${AGENT_IMAGE:?Set AGENT_IMAGE to your Gitea registry image}
    pull_policy: always
    restart: unless-stopped
    env_file: .env
    environment:
      DATA_DIR: /app/data
      KNOWLEDGE_DIR: /app/knowledge
      OLLAMA_URL: ${OLLAMA_URL:-http://ollama:11434}
      OLLAMA_TIMEOUT: ${OLLAMA_TIMEOUT:-10m}
      OLLAMA_NUM_PREDICT: ${OLLAMA_NUM_PREDICT:-768}
      OLLAMA_JSON_RETRIES: ${OLLAMA_JSON_RETRIES:-1}
      OLLAMA_KEEP_ALIVE: ${OLLAMA_KEEP_ALIVE:-10m}
      OLLAMA_THINK: ${OLLAMA_THINK:-false}
      OLLAMA_MAX_CONCURRENT: ${OLLAMA_MAX_CONCURRENT:-1}
      PRIORITY_ANALYSIS_TIMEOUT: ${PRIORITY_ANALYSIS_TIMEOUT:-45s}
    ports:
      - "127.0.0.1:8080:8080"
    volumes:
      # Prepare once on the Linux host: mkdir -p data knowledge && chown 65532:65532 data
      - ./data:/app/data
      - ./knowledge:/app/knowledge:ro
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777

  ollama:
    image: ollama/ollama:latest
    restart: unless-stopped
    volumes:
      - ollama-data:/root/.ollama

volumes:
  ollama-data: