docker-compose.yml

services:
  radicale:
    build:
      context: .
      target: dev            # local dev image (enables the build-gated demo mode)
    image: questsync-radicale:dev
    container_name: questsync-radicale
    ports:
      - "5232:5232"
    environment:
      - PYTHONPATH=/app
      # Multi-user: the server holds NO account creds — each user authenticates
      # with their own Habitica User ID + API token as DAV credentials.
      # QUESTSYNC_DEMO=1 serves an offline fixture and accepts any login (dev/CI).
      - QUESTSYNC_DEMO=${QUESTSYNC_DEMO:-}
      - QUESTSYNC_TASK_TYPES=${QUESTSYNC_TASK_TYPES:-todos,dailys}
      - QUESTSYNC_CACHE_TTL=${QUESTSYNC_CACHE_TTL:-30}
      # Optional fixed x-client author id (defaults to each user's own id).
      - QUESTSYNC_CLIENT_AUTHOR=${QUESTSYNC_CLIENT_AUTHOR:-}
      # Access gate — default (unset) allows anyone with valid Habitica creds.
      # allowlist/http restrict who may log in (see .env.example / docs).
      - QUESTSYNC_ACCESS_POLICY=${QUESTSYNC_ACCESS_POLICY:-}
      - QUESTSYNC_ALLOWLIST=${QUESTSYNC_ALLOWLIST:-}
      - QUESTSYNC_ALLOWLIST_FILE=${QUESTSYNC_ALLOWLIST_FILE:-}
      - QUESTSYNC_ACCESS_HTTP_URL=${QUESTSYNC_ACCESS_HTTP_URL:-}
    volumes:
      # Live-editable config (restart the container to apply changes).
      - ./radicale/config:/etc/radicale/config:ro
      # Our custom storage plugin source (bind-mounted for fast iteration).
      - ./src:/app:ro
    restart: unless-stopped