services:
  ai-dnd:
    build: .
    ports:
      # Loopback on the host on purpose. The container listens on 0.0.0.0
      # because that is the only address a published port can reach, but the
      # storyteller UI/API is single-user and unauthenticated in local mode,
      # so it must not be published to the LAN. Reaching an Ollama on another
      # machine is a separate, outbound thing and needs no change here.
      - "127.0.0.1:8000:8000"
    volumes:
      - ai-dnd-data:/data
    restart: unless-stopped

volumes:
  ai-dnd-data: