services:
  hermes-hub:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: hermes-hub
    restart: unless-stopped
    user: "1026:100"
    ports:
      # Port 8088 reserve et bind strictement loopback (diagnostics SSH locaux)
      - "127.0.0.1:8088:8080"
    volumes:
      - ./data:/app/data
    environment:
      - TZ=Africa/Tunis
      - HUB_DATA_DIR=/app/data
      - HUB_SECRET=${HUB_SECRET}
      - NAS_TAILSCALE_IP=100.86.197.88
      - VPS_TAILSCALE_IP=100.94.90.119
      - HERMES_TT_URL=http://100.86.197.88:3010
      - HERMES_NYORA_URL=http://100.86.197.88:3020
      - HERMES_PERSO_URL=http://100.86.197.88:3031
      - HERMES_NABIL_URL=http://hermes-nabil:9119
      - DSH_FILEBROWSER_URL=http://dsh-vps-filebrowser:8080
    dns:
      - 1.1.1.1
      - 8.8.8.8
    networks:
      - dsh_vps_net
      - mcp-vps
    labels:
      com.centurylinklabs.watchtower.enable: "false"

networks:
  dsh_vps_net:
    external: true
  mcp-vps:
    external: true