docker-compose.yml

services:
  app:
    build: .
    ports:
      - "8000:8000"
    env_file:
      - .env
    environment:
      - QDRANT_HOST=qdrant
      # QDRANT_API_KEY comes from env_file (.env) — do not redefine it here.
      # A `${QDRANT_API_KEY:-}` override would clobber the .env value with an
      # empty string whenever the interpolation context lacks the var, which
      # silently desyncs the app from the (authenticated) Qdrant server.
      # Force HuggingFace's classic CDN download path. The Xet transfer
      # protocol is blocked/throttled by some corporate TLS-inspection proxies.
      - HF_HUB_DISABLE_XET=1
    volumes:
      - ./docs:/app/docs
      # Real (confidential) corpus — gitignored on the host. Read-only mount so
      # the container can ingest it when INGEST_ROOT=data.
      - ./data:/app/data:ro
      # Self-contained model cache so `docker compose up` works on any host
      # regardless of UID. First run downloads the models (~90MB); persists after.
      - hf_cache:/home/appuser/.cache/huggingface
    depends_on:
      qdrant:
        condition: service_healthy
    restart: unless-stopped

  qdrant:
    image: qdrant/qdrant:latest
    # No 'ports' — Qdrant stays on the internal docker network only. Expose
    # the ports for cross-container traffic without publishing to the host.
    expose:
      - "6333"
      - "6334"
    environment:
      # Fail loudly if QDRANT_API_KEY is unset/empty rather than starting an
      # unauthenticated server that the app expects to be authenticated.
      - QDRANT__SERVICE__API_KEY=${QDRANT_API_KEY:?QDRANT_API_KEY must be set in .env}
    volumes:
      - qdrant_data:/qdrant/storage
    healthcheck:
      test: ["CMD-SHELL", "bash -c 'echo > /dev/tcp/localhost/6333'"]
      interval: 5s
      timeout: 3s
      retries: 5
    restart: unless-stopped

volumes:
  qdrant_data:
  hf_cache: