# Ephemeral: no host volume. /data is tmpfs — gone when container is removed.
services:
  pts:
    build: .
    container_name: pts
    ports:
      - "${BACKEND_PORT:-8765}:8765"
      # noVNC：Teams MFA 互動畫面（點擊／輸入驗證碼）
      - "${TEAMS_VNC_PORT:-6080}:6080"
    environment:
      PTS_DATA_DIR: /data
      PTS_RELOAD: "false"
      PTS_IN_DOCKER: "true"
      DISPLAY: ":99"
      TEAMS_HEADLESS: "false"
      TEAMS_VNC_PORT: "6080"
      # Optional tokens from host shell / project .env (compose substitution only; not a data mount)
      GITLAB_TOKEN: ${GITLAB_TOKEN:-}
      GITLAB_URL: ${GITLAB_URL:-}
      GITLAB_PROJECT_PATH: ${GITLAB_PROJECT_PATH:-}
      XAI_API_KEY: ${XAI_API_KEY:-}
      XAI_BASE_URL: ${XAI_BASE_URL:-}
      GROK_MODEL: ${GROK_MODEL:-}
      PTS_URL: ${PTS_URL:-}
      PTS_PROJECT_NAME: ${PTS_PROJECT_NAME:-}
    tmpfs:
      - /data:size=64m,mode=1777
    # Do not mount host dirs. Session / settings only live in container tmpfs.
    shm_size: "256mb"
    restart: "no"