services:
  mariadb:
    image: mariadb:11
    restart: unless-stopped
    environment:
      MARIADB_DATABASE: ${DB_NAME:-gitea_codex}
      MARIADB_USER: ${DB_USER:-gitea_codex}
      MARIADB_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD must be set}
      MARIADB_ROOT_PASSWORD: ${MARIADB_ROOT_PASSWORD:?MARIADB_ROOT_PASSWORD must be set}
    volumes:
      - ./db:/var/lib/mysql
    healthcheck:
      test: ["CMD", "mariadb-admin", "ping", "-h", "localhost", "-uroot", "-p${MARIADB_ROOT_PASSWORD}"]
      interval: 5s
      timeout: 3s
      retries: 20

  bot:
    image: gitea.reversed.dev/space/gitea-codex:latest
    depends_on:
      mariadb:
        condition: service_healthy
    env_file:
      - .env
    volumes:
      - ./worktrees:/var/lib/gitea-codex/worktrees
      # The bot needs the host Docker API to launch isolated review containers.
      - /var/run/docker.sock:/var/run/docker.sock
    ports:
      - "8000:8000"