docker-compose.yml

services:
  stackdog:
    image: trydirect/stackdog:latest
    network_mode: host
    cap_add:
      - NET_ADMIN
    labels:
      # Keeps Stackdog from reading its own logs and reporting its own errors
      # as findings. More reliable than inferring the container ID from /proc.
      com.trydirect.stackdog.ignore: "true"
    environment:
      APP_HOST: 0.0.0.0
      APP_PORT: 5000
      DATABASE_URL: /data/stackdog.db
      STACKDOG_SNIFF_INTERVAL: 30
      STACKDOG_AI_PROVIDER: openai
      STACKDOG_AI_API_URL: https://api.openai.com/v1
      STACKDOG_AI_MODEL: gpt-4o-mini
      STACKDOG_AI_API_KEY: <yourkeyhere>
      STACKDOG_SLACK_WEBHOOK_URL: <yourslackchannelwebhook?
      STACKDOG_LOG_SOURCES: /var/log/syslog,/var/log/auth.log,/var/log/nginx/access.log
    restart: unless-stopped
    volumes:
    - source: stackdog-data
      target: /data
      type: volume
    - source: /var/run/docker.sock
      target: /var/run/docker.sock
      type: bind
    command: serve
  stackdog-ui:
    image: trydirect/stackdog-ui:latest
    container_name: stackdog-ui
    restart: unless-stopped
    labels:
      com.trydirect.stackdog.ignore: "true"
    environment:
      # Resolved by the browser, so point these at an address it can reach.
      # Read at container start; no rebuild needed to change them.
      # Empty values make the dashboard use the host it was opened from.
      # Set STACKDOG_API_URL/STACKDOG_WS_URL for a separately hosted API.
      STACKDOG_API_URL: ${STACKDOG_API_URL:-}
      STACKDOG_WS_URL: ${STACKDOG_WS_URL:-}
    ports:
      - "${STACKDOG_UI_PORT:-3000}:80"

volumes:
  stackdog-data:
    name: stackdog-data