docker-compose.yml

services:
  necklass:
    image: ghcr.io/espresense/necklass:latest
    container_name: necklass
    restart: unless-stopped
    environment:
      # Required
      GITHUB_WEBHOOK_SECRET: ${GITHUB_WEBHOOK_SECRET}
      
      # Optional: Tailscale Funnel (zero-config public HTTPS)
      TAILSCALE_AUTHKEY: ${TAILSCALE_AUTHKEY:-}
      TAILSCALE_HOSTNAME: ${TAILSCALE_HOSTNAME:-necklass}
      
      # Optional: server config
      PORT: ${PORT:-80}
      LOG_LEVEL: ${LOG_LEVEL:-info}
    
    volumes:
      # Mount beads repository (READ/WRITE)
      # Set BEADS_REPO_PATH in .env to your beads repo location
      - ${BEADS_REPO_PATH}:/workspace
      
      # Optional: persist Tailscale state between restarts
      - tailscale-state:/var/lib/tailscale
    
    working_dir: /workspace
    
    # Only needed if NOT using Tailscale Funnel
    # ports:
    #   - "80:80"

volumes:
  tailscale-state: