docker-compose.yml

services:
  brain:
    build:
      context: .
      dockerfile: Dockerfile.brain
    ports:
      # Bind only to the loopback interface — not exposed to the local network.
      # The Body CLI/TUI connects to localhost:50051 as usual.
      - "127.0.0.1:50051:50051"
      - "127.0.0.1:50052:50052"
    env_file:
      # Injects GOOGLE_API_KEY (and any other vars) from the local .env file.
      # Never hard-code secrets here.
      - .env
    environment:
      # Override whatever A2C_BRAIN_HOST is in .env: inside the container the
      # server must bind to all interfaces so Docker can forward the port.
      - A2C_BRAIN_HOST=[::]
      - A2C_ADMIN_ENABLED=${A2C_ADMIN_ENABLED:-false}
      # Admin HTTP API must also bind to all interfaces inside the container.
      - A2C_ADMIN_HOST=0.0.0.0
      - A2C_STORAGE_DIR=/data
    volumes:
      # Named volume for sessions + device registry — persisted across restarts.
      - a2c_data:/data

volumes:
  a2c_data: