# The Car Wash REVIEW COLLECTOR — deployed on the REVIEWER's host (art-docker-station), NOT
# on a booth. Its own Komodo stack ("wash-collector" in komodo/resources.toml) points at this
# file alone, so nothing here reaches a booth and nothing of the booth stack reaches this
# host. See wiki/concepts/vision-review-outbox.md.
#
# Reachability: booths POST to /ingest over the Netbird overlay only. Bind the published
# port to the host's OVERLAY address (COLLECTOR_BIND), never 0.0.0.0 on a host that also
# has a public interface. The Netbird policy should allow booths → this host:8090 and
# nothing else on it.

services:
  collector:
    image: ${REGISTRY:-git.infra.msai.al/mca/parking_solution}/parking-collector:${TAG:-dev}
    restart: unless-stopped
    ports:
      - "${COLLECTOR_BIND:-127.0.0.1}:8090:8090"
    environment:
      # "<boothId>:<token>" pairs — one per booth, the booth's CARWASH_REVIEW_TOKEN under its
      # pseudonymous CARWASH_REVIEW_BOOTH_ID. A Komodo secret reference in the stack env.
      COLLECTOR_BOOTH_TOKENS: ${COLLECTOR_BOOTH_TOKENS:?set COLLECTOR_BOOTH_TOKENS in the stack env}
      # The single reviewer login (HTTP Basic over the overlay).
      COLLECTOR_REVIEWER_USER: ${COLLECTOR_REVIEWER_USER:-reviewer}
      COLLECTOR_REVIEWER_PASS: ${COLLECTOR_REVIEWER_PASS:?set COLLECTOR_REVIEWER_PASS in the stack env}
      LOG_LEVEL: ${LOG_LEVEL:-info}
      # The trainer's job API (sibling service above). Unset = no Training section.
      COLLECTOR_TRAINER_URL: ${COLLECTOR_TRAINER_URL-http://trainer:8091}
    volumes:
      - collector-data:/data

  # Phase B trainer — a small always-on job service beside the collector (CPU-only torch;
  # idle it is a tiny Python HTTP server, torch loads only when a job runs). It reads the
  # collector's SQLite + crops off the same volume (read-only) and keeps models, reports and
  # job logs in its own volume. NOT published: only the collector reaches it, on this compose
  # network, and the reviewer's login on the collector is the gate. The Training section of
  # /review is its UI (readiness, Train / Evaluate / Publish, reports, logs).
  # See wiki/decisions/bodytype-classifier-training.md.
  trainer:
    image: ${REGISTRY:-git.infra.msai.al/mca/parking_solution}/parking-trainer:${TAG:-dev}
    restart: unless-stopped
    environment:
      # Where `publish` PUTs a passing model (a Gitea generic package) and the token it uses
      # (package:write). Only publishing needs the token; training runs without it.
      TRAINER_PUBLISH_URL: ${TRAINER_PUBLISH_URL:-https://git.infra.msai.al/api/packages/mca/generic/parking-bodytype}
      TRAINER_PUBLISH_TOKEN: ${TRAINER_PUBLISH_TOKEN:-}
    volumes:
      - collector-data:/data:ro
      - trainer-out:/out

volumes:
  collector-data:
  trainer-out: