services:
  ventagent:
    image: ventagent:local
    build: .
    init: true
    restart: unless-stopped
    env_file: .env
    environment:
      DEEP_AGENT_ENV_PRIORITY: process
      PORT: "8080"
      DEEPAGENT_THINKING: "${DEEPAGENT_THINKING:-highest}"
      RESULT_PLATFORM_ENABLED: "${RESULT_PLATFORM_ENABLED:-False}"
      MAIN_FAN_WORKFLOW_PUBLISH_ENABLED: "${MAIN_FAN_WORKFLOW_PUBLISH_ENABLED:-False}"
      MAIN_FAN_OCR_BASE_URL: "${MAIN_FAN_OCR_BASE_URL:-http://10.244.3.155:10803/v1}"
      MAIN_FAN_OCR_MODEL: "${MAIN_FAN_OCR_MODEL:-glm-ocr}"
      BILLING_ENABLED: "${BILLING_ENABLED:-False}"
      MAIN_FAN_LOCAL_BATCH_ENABLED: "${MAIN_FAN_LOCAL_BATCH_ENABLED:-True}"
      MAIN_FAN_BATCH_RUN_ON_STARTUP: "${MAIN_FAN_BATCH_RUN_ON_STARTUP:-False}"
      MAIN_FAN_BATCH_STARTUP_MAX_MINES: "${MAIN_FAN_BATCH_STARTUP_MAX_MINES:-2}"
      MAIN_FAN_BATCH_CRON: "${MAIN_FAN_BATCH_CRON-0 2 1 * *}"
      MAIN_FAN_BATCH_SPREAD_DAYS: "${MAIN_FAN_BATCH_SPREAD_DAYS:-20}"
      MAIN_FAN_BATCH_DEPT_IDS: "${MAIN_FAN_BATCH_DEPT_IDS:-all}"
      MAIN_FAN_BATCH_ALLOW_ALL: "${MAIN_FAN_BATCH_ALLOW_ALL:-True}"
      MAIN_FAN_BATCH_MAX_MINES: "${MAIN_FAN_BATCH_MAX_MINES:-0}"
      MAIN_FAN_REPORT_MODE: crawler
      # 在资料服务所在 Linux 宿主机运行；其仅监听本机时使用回环地址。
      MAIN_FAN_REPORT_API_URL: "${MAIN_FAN_REPORT_API_URL:-http://127.0.0.1:19010}"
      MAIN_FAN_REPORT_SOURCE_DIR: /data/source_data
      MAIN_FAN_BATCH_OUTPUT_DIR: /app/outputs/main_fan_batches
      LOG_LEVEL: "${LOG_LEVEL:-INFO}"
      LOG_FORMAT: json
      LOG_FILE: /app/logs/ventagent.jsonl
    network_mode: host
    # bubblewrap 创建隔离的用户/挂载/网络命名空间；宿主须支持非特权用户命名空间。
    # 不给应用 SYS_ADMIN；沙箱进程仍禁网，只读系统文件且只写当前 workspace。
    security_opt:
      - seccomp=unconfined
      - apparmor=unconfined
    cap_drop:
      - ALL
    volumes:
      - ventagent-data:/app/data
      - ventagent-outputs:/app/outputs
      - ventagent-logs:/app/logs
      - type: bind
        source: /home/chief/source_data
        target: /data/source_data
        read_only: true
        bind:
          create_host_path: false
    logging:
      driver: json-file
      options:
        max-size: 20m
        max-file: "5"

volumes:
  ventagent-data:
  ventagent-outputs:
  ventagent-logs: