services:
  openhab-ai-bridge:
    build: .
    container_name: openhab-ai-bridge
    restart: unless-stopped
    env_file: .env
    ports:
      - "8090:8090"
    volumes:
      - ./data:/data
    devices:
      - /dev/snd:/dev/snd
    group_add:
      - "${AUDIO_GID:-29}"
    read_only: true
    tmpfs:
      - /tmp:size=32m,noexec,nosuid,nodev
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    healthcheck:
      test:
        [
          "CMD",
          "python",
          "-c",
          "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8090/health',timeout=2).read()",
        ]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s