services:
  opencode:
    build:
      context: .
      dockerfile: Dockerfile
    image: opencode-sandbox
    container_name: opencode
    cap_add:
      - NET_ADMIN   # required for iptables in entrypoint
      - NET_RAW
    volumes:
      # Your monorepo
      - /home/ga/workspace:/workspace
      # Mount entire SSH directory from host
      - /home/ga/.ssh:/root/.ssh
      # Persist opencode auth
      - opencode-auth:/root/.local/share/opencode
      # Go CRM database
      - ./data:/workspace/data
    environment:
      - OPENCODE_API_KEY=${OPENCODE_API_KEY}
    stdin_open: true
    tty: true
    ports:
      - "8080:8080"
    working_dir: /workspace
    networks:
      - crm-network

networks:
  crm-network:
    name: crm-network
    external: true

volumes:
  opencode-auth: