# Development overrides — bind-mount source code so changes take effect
# without a full image rebuild. Loaded automatically by docker compose.
services:
  musehub:
    build:
      context: .
    working_dir: /app
    volumes:
      - ./musehub:/app/musehub
      - ./tests:/app/tests
      - ./alembic:/app/alembic
      - ./scripts:/app/scripts
      - ./tourdeforce:/app/tourdeforce
      - musehub_data:/data
    environment:
      DEBUG: "true"
      CORS_ORIGINS: '["http://localhost:10003", "muse://"]'
      # Fallback dev/test secret (≥32 bytes for HMAC-SHA256) — override in .env for production
      ACCESS_TOKEN_SECRET: "${ACCESS_TOKEN_SECRET:-dev-test-secret-change-in-prod!!}"
    # Reload on code changes
    command: >
      uvicorn musehub.main:app
      --host 0.0.0.0
      --port 10003
      --reload