compose.yaml

name: cmdop-live-demo

services:
  demo:
    build:
      context: .
      # Cmdop is installed from the unpinned official installer. Disable the
      # layer cache so every build resolves the current release.
      no_cache: true
      pull: true
      args:
        HOST_UID: ${HOST_UID:-1000}
        HOST_GID: ${HOST_GID:-1000}
        CMDOP_BROWSER: ${CMDOP_BROWSER:-1}
    image: cmdop-live-demo:local
    init: true
    # Headless Chromium maps renderer memory into /dev/shm; the Docker
    # default of 64 MB crashes it on heavy pages.
    shm_size: "1gb"
    restart: unless-stopped
    environment:
      CMDOP_ROUTER_API_KEY: ${CMDOP_API_KEY:-}
      CMDOP_PERMISSIONS_MODE: ${CMDOP_PERMISSIONS_MODE:-default}
      CMDOP_MACHINE_NAME: ${CMDOP_MACHINE_NAME:-cmdop-live-demo}
      CMDOP_AGENT_CWD: ${CMDOP_AGENT_CWD:-/workspace/demo}
      CMDOP_RELAY_MODE: ${CMDOP_RELAY_MODE:-auto}
      CMDOP_PUBLIC_SUBDOMAIN: ${CMDOP_PUBLIC_SUBDOMAIN:-}
      VITE_USE_POLLING: ${VITE_USE_POLLING:-true}
      VITE_POLL_INTERVAL_MS: ${VITE_POLL_INTERVAL_MS:-300}
      VITE_HMR_CLIENT_PORT: ${VITE_HMR_CLIENT_PORT:-}
      VITE_CMDOP_CONSOLE_PORT: ${CMDOP_HOST_PORT:-63141}
      GIT_DIR: /workspace/.git
      GIT_WORK_TREE: /workspace/demo
      CMDOP_GIT_AUTHOR_NAME: ${CMDOP_GIT_AUTHOR_NAME:-Cmdop Agent}
      CMDOP_GIT_AUTHOR_EMAIL: ${CMDOP_GIT_AUTHOR_EMAIL:-agent@cmdop.local}
    secrets:
      - cmdop_admin_password
    ports:
      - "${HOST_BIND_ADDRESS:-127.0.0.1}:${DEMO_HOST_PORT:-8080}:5173"
      - "${HOST_BIND_ADDRESS:-127.0.0.1}:${CMDOP_HOST_PORT:-63141}:63141"
    volumes:
      - cmdop_state:/home/cmdop
      - ./config:/home/cmdop/.config/cmdop
      - ./demo:/workspace/demo
      - demo_git:/workspace/.git
      - demo_node_modules:/workspace/demo/node_modules
    stop_grace_period: 20s

  # Agent mode: this container is ONE MORE MACHINE enrolled into an EXISTING
  # Cmdop server — no embedded server, no demo, no published ports. Start it
  # explicitly (the default `docker compose up` is untouched):
  #
  #   docker compose --profile agent up --build agent
  #
  # Requires CMDOP_SERVER_URL + CMDOP_ENROLL_PASSWORD in .env.
  agent:
    profiles: ["agent"]
    # The machine name in the fleet derives from the hostname — a random
    # container id makes an unrecognizable roster entry.
    hostname: ${CMDOP_MACHINE_NAME:-cmdop-docker-agent}
    build:
      context: .
      no_cache: true
      pull: true
      args:
        HOST_UID: ${HOST_UID:-1000}
        HOST_GID: ${HOST_GID:-1000}
        CMDOP_BROWSER: ${CMDOP_BROWSER:-1}
    image: cmdop-live-demo:local
    init: true
    # Headless Chromium (agent browser tools) needs more than the 64 MB default.
    shm_size: "1gb"
    restart: unless-stopped
    environment:
      CMDOP_CONTAINER_MODE: agent
      CMDOP_SERVER_URL: ${CMDOP_SERVER_URL:-}
      CMDOP_ENROLL_PASSWORD: ${CMDOP_ENROLL_PASSWORD:-}
      CMDOP_SERVER_INSECURE: ${CMDOP_SERVER_INSECURE:-0}
      CMDOP_ROUTER_API_KEY: ${CMDOP_API_KEY:-}
      CMDOP_PERMISSIONS_MODE: ${CMDOP_PERMISSIONS_MODE:-default}
      CMDOP_MACHINE_NAME: ${CMDOP_MACHINE_NAME:-cmdop-docker-agent}
      CMDOP_AGENT_CWD: /workspace
    volumes:
      - cmdop_agent_state:/home/cmdop
      - ./workspace:/workspace
    stop_grace_period: 20s

volumes:
  cmdop_state:
  cmdop_agent_state:
  demo_git:
  demo_node_modules:

secrets:
  cmdop_admin_password:
    environment: CMDOP_ADMIN_PASSWORD