services:
  opencode:
    build:
      context: .
      dockerfile: Dockerfile
    image: opencode-sandbox
    container_name: opencode
    cap_add:
      - NET_ADMIN   # required for iptables in entrypoint
      - NET_RAW
    volumes:
      # Your monorepo
      - /home/ga/workspace:/workspace
      # Mount entire SSH directory from host
      - /home/ga/.ssh:/root/.ssh
      # Persist opencode auth
      - opencode-auth:/root/.local/share/opencode
    environment:
      - OPENCODE_API_KEY=${OPENCODE_API_KEY}
    stdin_open: true
    tty: true
    working_dir: /workspace

volumes:
  opencode-auth: