# ============================================
# Dockhand — TrueNAS Compose Draft
# ============================================
# Target: TrueNAS regular Docker / Portainer Compose deployment.
# Source pattern:
# - TrueNAS Docker data root: /mnt/HomeStorage02/Docker/<ContainerName>/...
# - Container user convention: PUID=568 / PGID=568 where supported.
#
# Deploy after review:
#   docker compose --env-file dockhand-truenas.env -f dockhand-truenas-compose.yml up -d
#
# Validate:
#   docker compose --env-file dockhand-truenas.env.example -f dockhand-truenas-compose.yml config
#
# Notes:
# - Dockhand needs access to /var/run/docker.sock to manage the local Docker host.
# - Keep the Docker socket exposure LAN/VPN-only; do not expose this UI publicly.
# - Persistent app data is stored under /app/data.
# ============================================

services:
  dockhand:
    image: ${DOCKHAND_IMAGE:-fnsys/dockhand}:${DOCKHAND_TAG:-latest}
    container_name: dockhand
    restart: unless-stopped
    init: true
    ports:
      - "${DOCKHAND_HTTP_PORT:-3000}:3000"
    environment:
      TZ: ${TZ:-America/Chicago}
      PUID: ${PUID:-568}
      PGID: ${PGID:-568}
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ${TRUENAS_DOCKER_ROOT:-/mnt/HomeStorage02/Docker}/Dockhand/data:/app/data
    security_opt:
      - no-new-privileges:true