# Local dev overrides — use with: docker compose -f docker-compose.yml -f docker-compose.dev.yml up
services:
  api:
    build:
      context: .
      dockerfile: apps/api/Dockerfile
      target: dev
    volumes:
      - ./apps/api/src:/app/apps/api/src
    environment:
      NODE_ENV: development
      # Local-dev only: skip OIDC and authenticate as Dev User id 1. Guarded by
      # NODE_ENV !== 'production' (and the production image bakes NODE_ENV=production),
      # so this can never activate in a shipped image. Required by the e2e harness.
      DEV_AUTH_BYPASS: 'true'
      # Phase 19 (AUTH-LOCAL-16, D-14/D-15): required for devSessionCookieMiddleware to
      # issue real local-session cookies under bypass AND for the real-login round-trip
      # (POST /api/auth/local/login) to sign a session — without it that path 503s.
      # Fixed dev-only value, mirrors the CI harness job (.gitea/workflows/ci.yml) —
      # NEVER a production secret; this override file is dev-only (target: dev).
      LOCAL_SESSION_SECRET: 'dev-secret-change-me-0000000000000000'

  mariadb:
    ports:
      - '3306:3306'