pikasTech-unidesk/docker-compose.yml

services:
  database:
    image: postgres:16-alpine
    container_name: unidesk-database
    restart: unless-stopped
    expose:
      - "5432"
    environment:
      POSTGRES_USER: "${UNIDESK_DATABASE_USER}"
      POSTGRES_PASSWORD: "${UNIDESK_DATABASE_PASSWORD}"
      POSTGRES_DB: "${UNIDESK_DATABASE_NAME}"
    command:
      - "postgres"
      - "-c"
      - "config_file=/etc/postgresql/postgresql.conf"
      - "-c"
      - "hba_file=/etc/postgresql/pg_hba.conf"
      - "-c"
      - "logging_collector=on"
      - "-c"
      - "log_directory=/var/log/unidesk/${UNIDESK_LOG_DAY}"
      - "-c"
      - "log_filename=${UNIDESK_LOG_PREFIX}_database.log"
      - "-c"
      - "log_connections=on"
      - "-c"
      - "log_disconnections=on"
    volumes:
      - unidesk_pgdata_10gb:/var/lib/postgresql/data
      - ./src/components/database/init:/docker-entrypoint-initdb.d:ro
      - ./src/components/database/config/postgresql.conf:/etc/postgresql/postgresql.conf:ro
      - ./src/components/database/config/pg_hba.conf:/etc/postgresql/pg_hba.conf:ro
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${UNIDESK_DATABASE_USER} -d ${UNIDESK_DATABASE_NAME}"]
      interval: 5s
      timeout: 3s
      retries: 20

  backend-core:
    build:
      context: .
      dockerfile: src/components/backend-core/Dockerfile
    container_name: unidesk-backend-core
    restart: unless-stopped
    depends_on:
      - database
    ports:
      - "${UNIDESK_PROVIDER_INGRESS_PORT}:8081"
    expose:
      - "8080"
    environment:
      PORT: "8080"
      PROVIDER_PORT: "8081"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
      HEARTBEAT_TIMEOUT_MS: "${UNIDESK_HEARTBEAT_TIMEOUT_MS}"
      TASK_PENDING_TIMEOUT_MS: "${UNIDESK_TASK_PENDING_TIMEOUT_MS:-600000}"
      DATABASE_VOLUME_NAME: "${UNIDESK_DATABASE_VOLUME}"
      DATABASE_VOLUME_SIZE: "${UNIDESK_DATABASE_VOLUME_SIZE}"
      PGDATA_BACKUP_STAGING_DIR: "/data/baidu-netdisk-staging"
      BAIDU_NETDISK_INTERNAL_URL: "http://baidu-netdisk:4244"
      MICROSERVICES_JSON: "${UNIDESK_MICROSERVICES_JSON:-[]}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_backend-core.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
      - ./.state/baidu-netdisk/staging:/data/baidu-netdisk-staging
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  todo-note:
    build:
      context: /root/todo_note
      dockerfile: Dockerfile
    container_name: todo-note-backend
    restart: unless-stopped
    depends_on:
      - database
    expose:
      - "4211"
    environment:
      HOST: "0.0.0.0"
      PORT: "4211"
      TODO_NOTE_BACKEND_ONLY: "1"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      TODO_NOTE_LOGS_DIR: "logs"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_todo-note.jsonl"
      TODO_NOTE_LOG_PATH: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_todo-note.jsonl"
      TODO_NOTE_REMINDER_CLAUDEQQ_ENABLED: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_ENABLED:-true}"
      TODO_NOTE_REMINDER_CLAUDEQQ_BASE_URL: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_BASE_URL:-http://backend-core:8080/api/microservices/claudeqq/proxy}"
      TODO_NOTE_REMINDER_CLAUDEQQ_TARGET_TYPE: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_TARGET_TYPE:-private}"
      TODO_NOTE_REMINDER_CLAUDEQQ_USER_ID: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_USER_ID:-645275593}"
      TODO_NOTE_REMINDER_CLAUDEQQ_GROUP_ID: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_GROUP_ID:-}"
      TODO_NOTE_REMINDER_LEAD_MINUTES: "${UNIDESK_TODO_NOTE_REMINDER_LEAD_MINUTES:-10}"
      TODO_NOTE_REMINDER_SCAN_INTERVAL_MS: "${UNIDESK_TODO_NOTE_REMINDER_SCAN_INTERVAL_MS:-30000}"
      TODO_NOTE_REMINDER_CLAUDEQQ_TIMEOUT_MS: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_TIMEOUT_MS:-15000}"
      TODO_NOTE_REMINDER_CLAUDEQQ_SEND_ATTEMPTS: "${UNIDESK_TODO_NOTE_REMINDER_CLAUDEQQ_SEND_ATTEMPTS:-3}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4211/api/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  code-queue:
    build:
      context: .
      dockerfile: src/components/microservices/code-queue/Dockerfile
    container_name: code-queue-backend
    restart: unless-stopped
    mem_limit: "${UNIDESK_CODE_QUEUE_MEM_LIMIT:-1200m}"
    memswap_limit: "${UNIDESK_CODE_QUEUE_MEMSWAP_LIMIT:-1800m}"
    depends_on:
      - database
      - backend-core
      - oa-event-flow
    expose:
      - "4222"
    environment:
      HOST: "0.0.0.0"
      PORT: "4222"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      CODE_QUEUE_DATA_DIR: "/var/lib/unidesk/code-queue"
      CODE_QUEUE_WORKDIR: "/root/unidesk"
      CODE_QUEUE_CODEX_HOME: "/var/lib/unidesk/code-queue/codex-home"
      CODE_QUEUE_OPENCODE_XDG_DIR: "/var/lib/unidesk/code-queue/opencode-xdg"
      CODE_QUEUE_SOURCE_CODEX_CONFIG: "/root/.codex/config.toml"
      CODE_QUEUE_DEFAULT_MODEL: "gpt-5.5"
      CODE_QUEUE_MODELS: "gpt-5.5,gpt-5.4-mini,gpt-5.4,minimax-m2.7"
      CODE_QUEUE_MODEL_REASONING_EFFORTS: "gpt-5.5=xhigh"
      CODE_QUEUE_SANDBOX: "danger-full-access"
      CODE_QUEUE_APPROVAL_POLICY: "never"
      OA_EVENT_FLOW_BASE_URL: "http://oa-event-flow:4255"
      CODE_QUEUE_MAX_ATTEMPTS: "99"
      CODE_QUEUE_MAX_ACTIVE_QUEUES: "${UNIDESK_CODE_QUEUE_MAX_ACTIVE_QUEUES:-0}"
      NODE_OPTIONS: "${UNIDESK_CODE_QUEUE_NODE_OPTIONS:---max-old-space-size=512}"
      CODE_QUEUE_IN_MEMORY_OUTPUT_RECORDS: "${UNIDESK_CODE_QUEUE_IN_MEMORY_OUTPUT_RECORDS:-10}"
      CODE_QUEUE_IN_MEMORY_EVENT_RECORDS: "${UNIDESK_CODE_QUEUE_IN_MEMORY_EVENT_RECORDS:-10}"
      CODE_QUEUE_CODEX_SQLITE_LOG_EXPORT_BATCH_SIZE: "${UNIDESK_CODE_QUEUE_CODEX_SQLITE_LOG_EXPORT_BATCH_SIZE:-500}"
      CODE_QUEUE_MAIN_PROVIDER_ID: "main-server"
      CODE_QUEUE_REMOTE_WORKDIR: "${UNIDESK_CODE_QUEUE_REMOTE_WORKDIR:-/home/ubuntu}"
      CODE_QUEUE_EXECUTION_PROVIDER_IDS: "${UNIDESK_CODE_QUEUE_EXECUTION_PROVIDER_IDS:-D601}"
      CODE_QUEUE_DEV_CONTAINER_MASTER_HOST: "${UNIDESK_PUBLIC_HOST}"
      CODE_QUEUE_DEV_CONTAINER_DEFAULT_PROVIDER_ID: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_DEFAULT_PROVIDER_ID:-D601}"
      CODE_QUEUE_DEV_CONTAINER_IMAGE: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_IMAGE:-}"
      CODE_QUEUE_DEV_CONTAINER_WORKDIR: "${UNIDESK_CODE_QUEUE_DEV_CONTAINER_WORKDIR:-/home/ubuntu}"
      CODE_QUEUE_WINDOWS_NATIVE_CODEX_DEFAULT_WORKDIR: "${UNIDESK_CODE_QUEUE_WINDOWS_NATIVE_CODEX_DEFAULT_WORKDIR:-/mnt/f/Work/ConStart}"
      CODE_QUEUE_WINDOWS_NATIVE_CODEX_BRIDGE_DIR: "${UNIDESK_CODE_QUEUE_WINDOWS_NATIVE_CODEX_BRIDGE_DIR:-/home/ubuntu/.unidesk/code-queue/windows-native-codex}"
      CODE_QUEUE_WINDOWS_NATIVE_CODEX_COMMAND: "${UNIDESK_CODE_QUEUE_WINDOWS_NATIVE_CODEX_COMMAND:-codex app-server --listen stdio://}"
      CODE_QUEUE_WINDOWS_NATIVE_CODEX_CONNECT_HOST: "${UNIDESK_CODE_QUEUE_WINDOWS_NATIVE_CODEX_CONNECT_HOST:-host.docker.internal}"
      CODE_QUEUE_WINDOWS_NATIVE_CODEX_IDLE_TIMEOUT_MS: "${UNIDESK_CODE_QUEUE_WINDOWS_NATIVE_CODEX_IDLE_TIMEOUT_MS:-600000}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_ENABLED: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_ENABLED:-true}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_BASE_URL: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_BASE_URL:-http://backend-core:8080/api/microservices/claudeqq/proxy}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_TARGET_TYPE: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_TARGET_TYPE:-private}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_USER_ID: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_USER_ID:-645275593}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_GROUP_ID: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_GROUP_ID:-}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_MAX_RESPONSE_CHARS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_MAX_RESPONSE_CHARS:-12000}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_TIMEOUT_MS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_TIMEOUT_MS:-15000}"
      CODE_QUEUE_NOTIFY_CLAUDEQQ_SEND_ATTEMPTS: "${UNIDESK_CODE_QUEUE_NOTIFY_CLAUDEQQ_SEND_ATTEMPTS:-3}"
      OPENAI_API_KEY: "${OPENAI_API_KEY:-}"
      CRS_OAI_KEY: "${CRS_OAI_KEY:-}"
      MINIMAX_API_KEY: "${UNIDESK_CODE_QUEUE_MINIMAX_API_KEY:-}"
      MINIMAX_API_BASE: "${UNIDESK_CODE_QUEUE_MINIMAX_API_BASE:-https://api.minimaxi.com/v1}"
      MINIMAX_MODEL: "${UNIDESK_CODE_QUEUE_MINIMAX_MODEL:-MiniMax-M2.7}"
      MINIMAX_JUDGE_TIMEOUT_MS: "${UNIDESK_CODE_QUEUE_MINIMAX_JUDGE_TIMEOUT_MS:-90000}"
      MINIMAX_JUDGE_REPAIR_ATTEMPTS: "${UNIDESK_CODE_QUEUE_MINIMAX_JUDGE_REPAIR_ATTEMPTS:-2}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_code-queue.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - .:/root/unidesk
      - .:/workspace
      - /root/.codex/config.toml:/root/.codex/config.toml:ro
      - ${UNIDESK_HOST_ROOT_SSH_DIR:-/root/.ssh}:/root/.ssh:ro
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
      - ./.state/code-queue:/var/lib/unidesk/code-queue
    extra_hosts:
      - "host.docker.internal:host-gateway"
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS --max-time 2 http://127.0.0.1:4222/health >/dev/null"]
      interval: 5s
      timeout: 3s
      retries: 20


  oa-event-flow:
    image: oa-event-flow
    build:
      context: .
      dockerfile: src/components/microservices/oa-event-flow/Dockerfile
    container_name: oa-event-flow-backend
    restart: unless-stopped
    depends_on:
      - database
      - backend-core
    expose:
      - "4255"
    environment:
      HOST: "0.0.0.0"
      PORT: "4255"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      PIPELINE_OA_BRIDGE_BASE_URL: "http://backend-core:8080/api/microservices/pipeline/proxy"
      PIPELINE_OA_BRIDGE_INTERVAL_MS: "${UNIDESK_PIPELINE_OA_BRIDGE_INTERVAL_MS:-15000}"
      PIPELINE_OA_BRIDGE_RUN_LIMIT: "${UNIDESK_PIPELINE_OA_BRIDGE_RUN_LIMIT:-50}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_oa-event-flow.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4255/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  project-manager:
    image: project-manager
    build:
      context: .
      dockerfile: src/components/microservices/project-manager/Dockerfile
    container_name: project-manager-backend
    restart: unless-stopped
    depends_on:
      - database
    expose:
      - "4233"
    environment:
      HOST: "0.0.0.0"
      PORT: "4233"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_project-manager.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4233/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  baidu-netdisk:
    image: baidu-netdisk
    build:
      context: .
      dockerfile: src/components/microservices/baidu-netdisk/Dockerfile
    container_name: baidu-netdisk-backend
    restart: unless-stopped
    depends_on:
      - database
    expose:
      - "4244"
    environment:
      HOST: "0.0.0.0"
      PORT: "4244"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      BAIDU_NETDISK_CLIENT_ID: "${UNIDESK_BAIDU_NETDISK_CLIENT_ID:-}"
      BAIDU_NETDISK_CLIENT_SECRET: "${UNIDESK_BAIDU_NETDISK_CLIENT_SECRET:-}"
      BAIDU_NETDISK_TOKEN_KEY: "${UNIDESK_BAIDU_NETDISK_TOKEN_KEY:-}"
      BAIDU_NETDISK_APP_ROOT: "${UNIDESK_BAIDU_NETDISK_APP_ROOT:-/}"
      BAIDU_NETDISK_STAGING_DIR: "/data/staging"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_baidu-netdisk.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
      - ./.state/baidu-netdisk/staging:/data/staging
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4244/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  frontend:
    build:
      context: .
      dockerfile: src/components/frontend/Dockerfile
    container_name: unidesk-frontend
    restart: unless-stopped
    depends_on:
      - backend-core
    ports:
      - "${UNIDESK_FRONTEND_PORT}:8080"
    environment:
      PORT: "8080"
      CORE_INTERNAL_URL: "http://backend-core:8080"
      FRONTEND_PUBLIC_URL: "http://${UNIDESK_PUBLIC_HOST}:${UNIDESK_FRONTEND_PORT}"
      PROVIDER_INGRESS_PUBLIC_URL: "ws://${UNIDESK_PUBLIC_HOST}:${UNIDESK_PROVIDER_INGRESS_PORT}/ws/provider"
      AUTH_USERNAME: "${UNIDESK_AUTH_USERNAME}"
      AUTH_PASSWORD: "${UNIDESK_AUTH_PASSWORD}"
      SESSION_SECRET: "${UNIDESK_SESSION_SECRET}"
      SESSION_TTL_SECONDS: "${UNIDESK_SESSION_TTL_SECONDS}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_frontend.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  provider-gateway:
    image: unidesk_provider-gateway
    build:
      context: .
      dockerfile: src/components/provider-gateway/Dockerfile
    container_name: unidesk-provider-gateway-main
    restart: always
    pid: "host"
    depends_on:
      - backend-core
    environment:
      PROVIDER_SERVER_URL: "ws://backend-core:8081/ws/provider"
      PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
      PROVIDER_ID: "${UNIDESK_PROVIDER_ID}"
      PROVIDER_NAME: "${UNIDESK_PROVIDER_NAME}"
      PROVIDER_LABELS_JSON: "${UNIDESK_PROVIDER_LABELS_JSON}"
      HEARTBEAT_INTERVAL_MS: "${UNIDESK_HEARTBEAT_INTERVAL_MS}"
      RECONNECT_BASE_MS: "${UNIDESK_RECONNECT_BASE_MS}"
      RECONNECT_MAX_MS: "${UNIDESK_RECONNECT_MAX_MS}"
      DOCKER_SOCKET_PATH: "/var/run/docker.sock"
      MONITOR_DISK_PATH: "${UNIDESK_MONITOR_DISK_PATH}"
      PROVIDER_UPGRADE_HOST_PROJECT_ROOT: "${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}"
      PROVIDER_UPGRADE_WORKSPACE_PATH: "${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}"
      PROVIDER_UPGRADE_COMPOSE_FILE: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_FILE}"
      PROVIDER_UPGRADE_ENV_FILE: "${UNIDESK_PROVIDER_UPGRADE_ENV_FILE}"
      PROVIDER_UPGRADE_COMPOSE_PROJECT: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_PROJECT}"
      PROVIDER_UPGRADE_SERVICE: "${UNIDESK_PROVIDER_UPGRADE_SERVICE}"
      PROVIDER_UPGRADE_RUNNER_IMAGE: "${UNIDESK_PROVIDER_UPGRADE_RUNNER_IMAGE}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_DAY}/${UNIDESK_LOG_PREFIX}_provider-gateway.jsonl"
      UNIDESK_LOG_RETENTION_BYTES: "${UNIDESK_LOG_RETENTION_BYTES:-1GiB}"
      HOST_SSH_HOST: "${UNIDESK_HOST_SSH_HOST}"
      HOST_SSH_PORT: "${UNIDESK_HOST_SSH_PORT}"
      HOST_SSH_USER: "${UNIDESK_HOST_SSH_USER}"
      HOST_SSH_KEY: "/run/host-ssh/id_ed25519"
      HOST_REMOTE_CWD: "/root"
      HOST_LOGIN_SHELL: "/bin/bash"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}:${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}:ro
      - ${UNIDESK_HOST_SSH_KEY_DIR}:/run/host-ssh:ro
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    extra_hosts:
      - "host.docker.internal:host-gateway"

volumes:
  unidesk_pgdata_10gb:
    name: unidesk_pgdata_10gb