services:
  db:
    image: postgres:16-alpine
    container_name: paperclip-db
    network_mode: host
    # network_mode: host would otherwise expose Postgres on every interface
    command: ["postgres", "-c", "listen_addresses=127.0.0.1"]
    environment:
      POSTGRES_USER: paperclip
      POSTGRES_PASSWORD: paperclip
      POSTGRES_DB: paperclip
    volumes:
      - {{ paperclip_base_path }}/pgdata:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U paperclip -d paperclip"]
      interval: 10s
      timeout: 5s
      retries: 5

  paperclip:
    image: paperclip-local:latest
    container_name: paperclip
    network_mode: host
    env_file:
      - {{ paperclip_base_path }}/.env
    environment:
      HOST: {{ paperclip_listen_host }}
      PAPERCLIP_HOME: /paperclip
      PAPERCLIP_PORT: {{ paperclip_port }}
      PAPERCLIP_PUBLIC_URL: "https://{{ paperclip_domain }}"
      PAPERCLIP_DEPLOYMENT_MODE: "{{ paperclip_deployment_mode }}"
 #     PAPERCLIP_DEPLOYMENT_EXPOSURE: "private"
      PAPERCLIP_ALLOWED_HOSTNAMES: "{{ paperclip_allowed_hostnames }}"
      DATABASE_URL: "postgresql://paperclip:paperclip@localhost:5432/paperclip"
      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
      PAPERCLIP_AGENT_JWT_SECRET: ${PAPERCLIP_AGENT_JWT_SECRET}
      VLLM_ENDPOINT: ${VLLM_ENDPOINT}
      OPENAI_API_KEY: "${OPENAI_API_KEY:-}"
      ANTHROPIC_API_KEY: "${ANTHROPIC_API_KEY:-}"
    volumes:
      - {{ paperclip_data_dir }}:/paperclip
      - {{ paperclip_base_path }}/.config/opencode:/paperclip/.config/opencode
      - {{ paperclip_base_path }}/.local/share/opencode:/paperclip/.local/share/opencode
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:{{ paperclip_port }}/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s