name: cognitive-agent-511

services:
  web:
    build:
      context: ../..
      dockerfile: deploy/server/Dockerfile
    image: cognitive-agent-511:latest
    container_name: cognitive-agent-511
    user: "10001:10001"
    restart: unless-stopped
    init: true
    env_file:
      - path: ../../.env
        format: raw
      - path: ../../.env.auth
        format: raw
    environment:
      HOST: 0.0.0.0
      PORT: "8000"
      PYTHONDONTWRITEBYTECODE: "1"
      PYTHONUNBUFFERED: "1"
      PYTHONPATH: /app/src:/app/domains/seat/src
      CODEX_HOME: /var/lib/codex
      CODEX_ASSISTANT_WORKSPACE: /tmp/codex-assistant-workspace
      CODEX_ASSISTANT_MODEL: gpt-5.6-luna
      CODEX_ASSISTANT_REASONING_EFFORT: low
      CODEX_ASSISTANT_DISABLE_WEBSOCKETS: "true"
      CODEX_ASSISTANT_STREAM_MAX_RETRIES: "1"
      CODEX_ASSISTANT_TURN_TIMEOUT_SECONDS: "300"
      SPEECH_MODEL_FILE: model.int8.onnx
      SPEECH_NUM_THREADS: "2"
    ports:
      - "127.0.0.1:8511:8000"
    volumes:
      - ../../artifacts/runs:/app/artifacts/runs
      - ../../artifacts/user-presets:/app/artifacts/user-presets
      - ../../artifacts/server:/app/artifacts/server
      - ../../artifacts/tmp:/app/artifacts/tmp
      - ../../artifacts/self-repair:/app/artifacts/self-repair
      - ../../artifacts/models:/app/artifacts/models:ro
      - ../../config/modes/vehicles/denza_n7/user:/app/config/modes/vehicles/denza_n7/user
      - codex_home:/var/lib/codex
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 256
    healthcheck:
      test:
        - CMD
        - python
        - -c
        - import urllib.request; urllib.request.urlopen("http://127.0.0.1:8000/api/health", timeout=3)
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s
    logging:
      driver: json-file
      options:
        max-size: 10m
        max-file: "3"

volumes:
  codex_home: