docker-compose.yml

services:
  # Single public web container: the Hono backend serves both the built frontend
  # (frontend/dist) and the /api/* routes. The old separate nginx `frontend`
  # service is gone; the combined image is built from the repo-root Dockerfile.
  backend:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        GIT_COMMIT: ${GIT_COMMIT:-unknown}
    environment:
      - PORT=5000
      # Persist study logs and the application SQLite DB under one mounted volume.
      # DATA_DIR is the single root for both (app.db + logs/).
      - DATA_DIR=/app/backend/data
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      # Thoughtful-demo project key: pays for sessionless (demo-mode) requests, capped
      # on OpenAI's side. Unset => sessionless requests are refused. See openaiProxy.ts.
      - OPENAI_DEMO_API_KEY=${OPENAI_DEMO_API_KEY:-}
      - LOG_SECRET=${LOG_SECRET}
      - POSTHOG_PROJECT_TOKEN=${POSTHOG_PROJECT_TOKEN:-}
      - POSTHOG_HOST=${POSTHOG_HOST:-https://e.thoughtful-ai.com/}
      # Management API (personal key + project id) — required for "delete my data"
      # to purge a user's PostHog person/events. Unset => deletion no-ops with a
      # warning (see deletePosthogPerson).
      - POSTHOG_PERSONAL_API_KEY=${POSTHOG_PERSONAL_API_KEY:-}
      - POSTHOG_PROJECT_ID=${POSTHOG_PROJECT_ID:-}
      - BETTER_AUTH_ENABLED=${BETTER_AUTH_ENABLED:-false}
      - BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET:-}
      - BETTER_AUTH_URL=${BETTER_AUTH_URL:-}
      - BETTER_AUTH_TRUSTED_ORIGINS=${BETTER_AUTH_TRUSTED_ORIGINS:-}
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET:-}
      - BETTER_AUTH_DEVICE_CLIENT_IDS=${BETTER_AUTH_DEVICE_CLIENT_IDS:-}
    restart: unless-stopped

  experiment:
    build:
      context: ./experiment
      dockerfile: Dockerfile
      args:
        GIT_COMMIT: ${GIT_COMMIT:-unknown}
        EXP_LOGS_GID: ${EXP_LOGS_GID:-1001}
    environment:
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - POSTHOG_PROJECT_TOKEN=${POSTHOG_PROJECT_TOKEN:-}
      - POSTHOG_HOST=${POSTHOG_HOST:-https://e.thoughtful-ai.com/}
    restart: unless-stopped

networks:
  default:
    driver: bridge