# dockmv, running on the SOURCE host.
#
#   docker compose up -d
#   docker compose logs dockmv   # the URL and access token are printed here
#
# The container needs the Docker socket to read containers and stream their
# data. That is equivalent to root on this host, so the UI is protected by a
# generated token and should not be published to an untrusted network.

services:
  dockmv:
    build:
      context: .
      args:
        VERSION: ${VERSION:-dev}
    image: dockmv:latest
    container_name: dockmv
    restart: unless-stopped
    ports:
      # Bind to loopback only. Use an SSH tunnel to reach it from elsewhere:
      #   ssh -L 8080:127.0.0.1:8080 you@this-host
      - "127.0.0.1:8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      # Connections, trusted SSH host keys and built packages.
      - migrate-data:/data
    environment:
      # Set a fixed token to keep the same URL across restarts.
      # DOCKMV_TOKEN: change-me
      TZ: ${TZ:-UTC}
    command:
      - serve
      - --addr=0.0.0.0:8080
      - --token=auto

volumes:
  migrate-data: