# Same image/binary as the Brain, but with the lightweight source-poller runtime.
# Create the Agent + token first in https://<brain>/source-agents.html.
services:
  source-agent:
    build:
      context: ..
    restart: unless-stopped
    environment:
      BRAIN_MODE: agent
      BRAIN_LISTEN_ADDR: :8090
      BRAIN_DATA_DIR: /app/data
      BRAIN_AGENT_BRAIN_URL: ${BRAIN_AGENT_BRAIN_URL:?set Brain URL}
      BRAIN_AGENT_ID: ${BRAIN_AGENT_ID:?set Agent ID}
      BRAIN_AGENT_TOKEN: ${BRAIN_AGENT_TOKEN:?set Agent token}
      BRAIN_AGENT_CONFIG_REFRESH: ${BRAIN_AGENT_CONFIG_REFRESH:-5m}
      BRAIN_AGENT_HTTP_TIMEOUT: ${BRAIN_AGENT_HTTP_TIMEOUT:-30s}
      BRAIN_AGENT_CONCURRENCY: ${BRAIN_AGENT_CONCURRENCY:-3}
      BRAIN_AGENT_BATCH_SIZE: ${BRAIN_AGENT_BATCH_SIZE:-50}
      BRAIN_AGENT_ALLOW_PRIVATE: ${BRAIN_AGENT_ALLOW_PRIVATE:-false}
    volumes:
      - source-agent-state:/app/data
    read_only: true
    tmpfs: [/tmp:size=32m]
    security_opt: [no-new-privileges:true]
    cap_drop: [ALL]

volumes:
  source-agent-state: