# gitea-review-bot — Spark deployment. `docker compose up -d` runs it detached; restart survives
# reboots. Host networking reaches Synapse (TLS), Gitea (LAN), and the Mac (WireGuard SSH alias).
services:
  bot:
    build: .
    image: gitea-review-bot
    container_name: gitea-review-bot
    network_mode: host
    restart: unless-stopped
    volumes:
      - ./.env:/app/.env:ro
      - ./config.toml:/app/config.toml:ro
      # Writable state (room→repo map, enabled agents, reviewed heads, thread roots). Survives
      # restarts/rebuilds; gitignored.
      - ./state:/app/state:rw
      # Reuse the SAME Spark→Mac key matrix-bridge uses (chmod 600 on the host).
      # Override the host path with GRB_SSH_KEY_HOST if the key lives elsewhere.
      - ${GRB_SSH_KEY_HOST:-/home/modelo/.ssh/id_ed25519}:/root/.ssh/id_ed25519:ro