spb/uqo-chat

1services:2  api:3    build: { context: ., dockerfile: backend/Dockerfile }4    env_file: .env5    environment:6      APP_ENV: development7      DATA_DIR: /data8      SANDBOX_URL: http://sandbox:80809      FRONTEND_DIST: /nonexistent   # in dev the web container serves the SPA10      CORS_ORIGINS: http://localhost:517311    volumes: [uqo-data:/data]12    ports: ["8190:8190"]13    depends_on: [sandbox]1415  web:16    image: node:22-alpine17    working_dir: /app18    command: sh -c "npm install && npm run dev -- --host"19    volumes: ["./frontend:/app"]20    environment: { VITE_API_URL: /api/v1 }21    ports: ["5173:5173"]2223  sandbox:24    build: ./sandbox-runner25    network_mode: none          # no egress from executed code (matches prod NetworkPolicy)26    read_only: true27    tmpfs: ["/tmp:size=100m", "/workspace:size=100m"]28    security_opt: ["no-new-privileges:true"]29    cap_drop: [ALL]30    pids_limit: 6431    mem_limit: 512m32    cpus: 0.53334volumes:35  uqo-data: {}36