services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
      target: run
    user: root
    depends_on:
      docker-engine:
        condition: service_healthy
      otel-collector:
        condition: service_started
    environment:
      APP_API_TOKEN: local-api-token
      APP_SIGNING_KEY: local-signing-key
    ports:
      - '127.0.0.1:8123:8123'
    volumes:
      - ./config/docker-compose.yml:/app/config/app.yaml:ro
      - sandbox-data:/var/lib/master-sandbox
      - sandbox-dependencies:/var/lib/master-dependencies:ro
      - sandbox-tools:/var/lib/master-lambda-tools:ro

  docker-engine:
    image: docker:28-dind
    privileged: true
    environment:
      DOCKER_TLS_CERTDIR: ''
    command:
      - --host=tcp://0.0.0.0:2375
    healthcheck:
      test:
        - CMD
        - docker
        - info
      interval: 5s
      timeout: 5s
      retries: 12
    volumes:
      - docker-data:/var/lib/docker
      - sandbox-data:/var/lib/master-sandbox
      - sandbox-dependencies:/var/lib/master-dependencies
      - sandbox-tools:/var/lib/master-lambda-tools

  otel-collector:
    image: grafana/otel-lgtm:latest
    ports:
      - '127.0.0.1:3000:3000'
    volumes:
      - lgtm-data:/data

volumes:
  docker-data:
  lgtm-data:
  sandbox-data:
  sandbox-dependencies:
  sandbox-tools: