# Auto-loaded by `docker compose` — build from local source instead of pulling stale GHCR images.
services:
  backend:
    build:
      context: .
      dockerfile: ./backend/Dockerfile
    environment:
      # Private Infonet swarm: only the seed onion is required in config.
      # Other participants (e.g. Pete) are discovered via signed manifest pull.
      MESH_ARTI_ENABLED: "true"
      MESH_ARTI_SOCKS_PORT: "9050"
      MESH_SYNC_TIMEOUT_S: "45"
      MESH_RELAY_PUSH_TIMEOUT_S: "45"
      MESH_SYNC_MAX_PEERS_PER_CYCLE: "5"
      MESH_INFONET_ALLOW_CLEARNET_SYNC: "false"
      MESH_PUBLIC_PEER_URL: ""
      # Empty means: use the sb-testnet fleet seed list from code/config.
      # Operators can rotate/add public fleet seeds with MESH_FLEET_SEED_PEERS.
      MESH_BOOTSTRAP_SEED_PEERS: ""
      MESH_FLEET_SEED_PEERS: "${MESH_FLEET_SEED_PEERS:-}"
      MESH_RELAY_PEERS: ""
      MESH_DEFAULT_SYNC_PEERS: ""
      MESH_BOOTSTRAP_SIGNER_PUBLIC_KEY: "ul1d0kj/ODPIp0OhHzX8eLAVXzJ3CVvzW1vn2IC6q3I="
      MESH_SWARM_MANIFEST_PULL_INTERVAL_S: "300"
      # Fleet testnet HMAC — overrides stale per-node .env so announce/push auth matches seed.
      MESH_PEER_PUSH_SECRET: "b7GoqsvoUD9MV7tyt0ZOzMptLA84QG6KCfaV9nDqz5Y"
      # Dev fleet: allow wormhole child agent to start without release attestation.
      PRIVACY_CORE_DEV_OVERRIDE: "true"

  frontend:
    build:
      context: ./frontend