services:
  socket-proxy:
    image: tecnativa/docker-socket-proxy
    container_name: dockhand-socket-proxy
    restart: always
    environment:
      # Required for Dockhand core functionality
      - CONTAINERS=1
      - IMAGES=1
      - NETWORKS=1
      - VOLUMES=1
      - EVENTS=1
      - POST=1
      - DELETE=1
      # Required for dashboard host info and disk usage
      - INFO=1
      - SYSTEM=1
      # Required for vulnerability scanning
      - ALLOW_START=1
      - ALLOW_STOP=1
      - ALLOW_RESTARTS=1
      # Optional: enable for terminal access
      - EXEC=1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - dockhand-net

  dockhand:
    image: fnsys/dockhand:latest
    container_name: dockhand
    restart: always
    depends_on:
      - socket-proxy
    environment:
      - PUID=1000
      - PGID=1000
    group_add:
      - "996"
    ports:
      - ${HTTP_PORT}:3000
    volumes:
      - /path/to/dockhand/dockhand_data:/app/data
    networks:
      - dockhand-net

networks:
  dockhand-net:
    external: true