From c79e18fc4b9c6412d1c3dacc1e2447414bcb132d Mon Sep 17 00:00:00 2001 From: Christoforus Surjoputro Date: Mon, 23 Mar 2026 17:17:57 +0700 Subject: [PATCH] update config based on feedback --- docker/docker-compose.local.yml | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/docker/docker-compose.local.yml b/docker/docker-compose.local.yml index 095bcb52a..f44fac4e4 100644 --- a/docker/docker-compose.local.yml +++ b/docker/docker-compose.local.yml @@ -11,17 +11,21 @@ services: userns_mode: "keep-id" user: "${UID:-1000}:${GID:-1000}" container_name: picoclaw-agent + # default: turns off SELinux for easier to run and test + # change or remove label=disable on production and employ seccomp policy instead security_opt: - label=disable profiles: - agent # Uncomment to access host network; leave commented unless needed. #extra_hosts: - # - "host.docker.internal:host-gateway" + # - "host.docker.internal:host-gateway" + environment: + - PICOCLAW_HOME=/home/picoclaw/.picoclaw + # Uncomment to make healtcheck works on podman pod model + # - PICOCLAW_GATEWAY_HOST=0.0.0.0 volumes: - ./data:/home/picoclaw/.picoclaw:Z - environment: - - PICOCLAW_GATEWAY_HOST=0.0.0.0 # needed to make healtcheck works on podman pod model entrypoint: ["picoclaw", "agent"] stdin_open: true tty: true @@ -37,6 +41,8 @@ services: dockerfile: docker/Dockerfile userns_mode: "keep-id" user: "${UID:-1000}:${GID:-1000}" + # default: turns off SELinux for easier to run and test + # change or remove label=disable on production and employ seccomp policy instead security_opt: - label=disable container_name: picoclaw-gateway @@ -45,8 +51,10 @@ services: - gateway # Uncomment to access host network; leave commented unless needed. #extra_hosts: - # - "host.docker.internal:host-gateway" + # - "host.docker.internal:host-gateway" environment: - - PICOCLAW_GATEWAY_HOST=0.0.0.0 # needed to make healtcheck works on podman pod model + - PICOCLAW_HOME=/home/picoclaw/.picoclaw + # Uncomment to make healtcheck works on podman pod model + # - PICOCLAW_GATEWAY_HOST=0.0.0.0 volumes: - ./data:/home/picoclaw/.picoclaw:Z