ai-sandbox/docker-compose.yml at main · damijanc/ai-sandbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
services:
  ai-agent:
    build:
      context: ./agent

    container_name: "ai-agent-${PROJECT_NAME}"
    stdin_open: true
    tty: true

    privileged: true

    # keep this
    security_opt:
      - no-new-privileges:true

    pids_limit: 512

    network_mode: "${NETWORK_MODE:-none}"

    volumes:
      - "${PROJECT_DIR}:/src:ro"
      - agent-workspace:/workspace
      - agent-home:/root
      - dind-data:/var/lib/docker

      # opencode config (read-only source)
      - "${HOME}/.config/opencode/opencode.json:/opencode/.config/opencode/opencode.json:ro"
      - "${HOME}/.local/share/opencode/auth.json:/opencode/.local/share/opencode/auth.json:ro"

    working_dir: /workspace

volumes:
  agent-workspace:
    name: "agent-workspace-${PROJECT_NAME}"
  agent-home:
    name: "agent-home-${PROJECT_NAME}"
  dind-data:
    name: "dind-data-${PROJECT_NAME}"