# Generated from EDL. Keep privileged credentials outside the agent service.
services:
  enclosed-agent:
    image: "ghcr.io/acme/coding-agent@sha256:REPLACE_WITH_DIGEST"
    command: [agent, run, "--repo", /workspace/repo]
    working_dir: /workspace
    user: "10000:10000"
    read_only: true
    cap_drop: ["ALL"]
    security_opt:
      - no-new-privileges:true
      - seccomp=./generated/seccomp.github-coding-agent.json
    pids_limit: 256
    mem_limit: 4gi
    cpus: 2
    tmpfs:
      - /tmp:rw,noexec,nosuid,size=256m
    volumes:
      - ./repo:/workspace/repo:rw
    environment:
      EDL_ENCLOSURE_ID: "enc:github-coding-agent"
      WAUTH_GATE: "https://doorkeeper.internal/mcp"
    networks:
      - agent_isolated

  doorkeeper-proxy:
    image: ghcr.io/acme/wauth-doorkeeper@sha256:REPLACE_WITH_DIGEST
    networks:
      - agent_isolated
      - privileged_egress

networks:
  agent_isolated:
    internal: true
  privileged_egress: {}
