services:
  studio:
    build:
      context: .
      args:
        PUBLIC_SITE_URL: ${APP_URL:-http://localhost:8787}
    ports: ["8787:8787"]
    environment:
      APP_URL: ${APP_URL:-http://localhost:8787}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY:?Set a stable ENCRYPTION_KEY}
      ALLOW_REGISTRATION: ${ALLOW_REGISTRATION:-true}
      COMMUNITY_ENABLED: ${COMMUNITY_ENABLED:-false}
      COMMUNITY_ADMIN_IDS: ${COMMUNITY_ADMIN_IDS:-}
      COMMUNITY_ADMIN_EMAILS: ${COMMUNITY_ADMIN_EMAILS:-}
      OBSERVABILITY_ADMIN_IDS: ${OBSERVABILITY_ADMIN_IDS:-}
      POSTHOG_PROJECT_KEY: ${POSTHOG_PROJECT_KEY:-}
      POSTHOG_HOST: ${POSTHOG_HOST:-}
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID:-}
      GITHUB_CLIENT_ID: ${GITHUB_CLIENT_ID:-}
      GITHUB_CLIENT_SECRET: ${GITHUB_CLIENT_SECRET:-}
      GITHUB_CALLBACK_URL: ${GITHUB_CALLBACK_URL:-}
    volumes: ["studio-data:/data"]
    restart: unless-stopped
    security_opt: ["no-new-privileges:true"]
volumes:
  studio-data: