# Glitch University agents — Production
#
# One container per agent. Quince (#9) is the first; add more as sibling
# services (each with its own build context dir + QUINCE_*-style identity vars).
#
# Deployed under /opt/gu_agents/ and started from /root/start.sh:
#   docker compose -f /opt/gu_agents/docker-compose.prod.yml \
#       --env-file /opt/gu_agents/.env.prod up -d
#
# Requires gu_common to be up (nginx → the API at glitch.university, and
# gnommo-gitea → ramanujan.glitch.university:2222) and the external `gnommo`
# network to exist (start.sh creates it).

services:
  quince:
    build:
      context: ./quince          # build inputs only: Dockerfile, scripts, identity/
      dockerfile: Dockerfile
      args:
        QUINCE_UID: ${QUINCE_UID:-1000}
    image: gnommo-agent-quince:latest
    container_name: gnommo-agent-quince
    restart: unless-stopped
    environment:
      # Claude Code auth (unattended)
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
      CLAUDE_MODEL: ${CLAUDE_MODEL:-}
      # Glitch Content API (gutask)
      API_URL: ${API_URL}
      CONTENT_API_KEY: ${CONTENT_API_KEY}
      # Quince's identity (gutask reads these as process env)
      AGENT_ID: ${QUINCE_AGENT_ID}
      AGENT_NAME: ${QUINCE_AGENT_NAME}
      AGENT_PASSWORD: ${QUINCE_AGENT_PASSWORD}
      # Scheduling
      TZ: ${TZ:-Etc/UTC}
      WAKE_TIME: ${WAKE_TIME:-09:00}
      RUN_ON_START: ${RUN_ON_START:-0}
    volumes:
      # Runtime self (kept OUTSIDE the build context so the SSH key is never
      # sent to the build daemon): .ssh, notes/, workspace/, logs/, .claude/.
      - ./quince-home:/home/quince
    extra_hosts:
      # Reach the API and git via the host's published ports rather than
      # hairpinning to the public IP.
      - "glitch.university:host-gateway"
      - "ramanujan.glitch.university:host-gateway"
    networks:
      - default
      - gnommo

networks:
  default: {}
  gnommo:
    external: true