homunculus/docker-compose.dev.yml at main · Rynaro/homunculus · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
services:
  app:
    build:
      context: .
      dockerfile: Dockerfile.dev
    environment:
      - RUBY_YJIT_ENABLE=1
      - BUNDLE_PATH=/usr/local/bundle
      - GEM_HOME=/usr/local/bundle
    env_file:
      - path: .env
        required: false
    volumes:
      - .:/app
      - homunculus-dev-gems:/usr/local/bundle
      - ./data:/app/data
    ports:
      - "127.0.0.1:18789:18789"
    networks:
      - homunculus-dev-net
    extra_hosts:
      - "host.docker.internal:host-gateway"
    stdin_open: true
    tty: true

  # Optional: Ollama running as a Docker service.
  # Start with: docker compose -f docker-compose.dev.yml --profile ollama up -d
  ollama:
    image: ollama/ollama:latest
    container_name: homunculus-dev-ollama
    profiles:
      - ollama
    volumes:
      - ollama-dev-data:/root/.ollama
    networks:
      - homunculus-dev-net
    ports:
      - "127.0.0.1:11434:11434"

  # Optional: SearXNG running as a Docker service for development.
  # Start with: docker compose -f docker-compose.dev.yml --profile searxng up -d
  searxng:
    image: searxng/searxng:latest
    container_name: homunculus-dev-searxng
    profiles:
      - searxng
    volumes:
      - ./config/searxng:/etc/searxng:rw
    networks:
      - homunculus-dev-net
      - searxng-dev-egress
    ports:
      - "127.0.0.1:8888:8080"
    security_opt:
      - no-new-privileges:true

  # Optional: Sandbox service for tool execution testing.
  # Start with: docker compose -f docker-compose.dev.yml --profile sandbox up -d
  sandbox:
    build:
      context: .
      dockerfile: Dockerfile.sandbox
    profiles:
      - sandbox
    network_mode: none
    read_only: true
    tmpfs:
      - /tmp:size=100M,noexec
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    mem_limit: 512m
    cpus: 1.0
    volumes:
      - ./workspace:/workspace:ro

networks:
  homunculus-dev-net:
    driver: bridge
    internal: true
  searxng-dev-egress:
    driver: bridge  # Allows SearXNG to reach external search engines

volumes:
  homunculus-dev-gems:
    driver: local
  ollama-dev-data:
    driver: local