services:
  hawser:
    image: ghcr.io/finsys/hawser:latest
    container_name: hawser
    restart: unless-stopped
    # Ports: aucun ! Edge Mode outbound seulement
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro    # Lecture Docker API
      - /data/hawser/stacks:/data/stacks                      # Stacks Compose persistants
      - /data/hawser/config:/data/config                      # Config Hawser
    environment:
      # Remplace par ton Dockhand !
      - DOCKHAND_SERVER_URL=wss://dockhand.tondomaine.com/api/hawser/connect
      - TOKEN=ton-token-genere-par-dockhand
      # Optionnel: Permissions non-root
      - PUID=1000      # id -u de ton user
      - PGID=1000      # id -g de ton user (docker group souvent 999/1000)
    # Permissions socket (si erreur denied)
    group_add:
      - 999  # GID Docker : stat -c '%g' /var/run/docker.sock