services:
  stealth-browser:
    build: .
    container_name: stealth-browser
    ports:
      - "8010:8000"
    environment:
      # Optional rotating residential proxy. Without it, datacenter IPs still
      # get blocked by Cloudflare/RiskIQ. Format: http://user:pass@host:port
      - PROXY=
      # Admin WebUI login (change these!). Empty ADMIN_PASS = no login (LAN open).
      - ADMIN_USER=admin
      - ADMIN_PASS=admin
      - CAPTCHA_WAIT_MS=4000    # how long to look for a captcha after load
      - SOLVE_TIMEOUT_S=900     # how long a challenge stays open before timing out
      - MAX_CONCURRENT=3
      # Docker can't give firefox its user-namespace sandbox
      - MOZ_DISABLE_CONTENT_SANDBOX=1
      - MOZ_DISABLE_GMP_SANDBOX=1
      - MOZ_DISABLE_RDD_SANDBOX=1
    volumes:
      - ./data:/data            # admin logs (logs.jsonl)
    restart: unless-stopped
    # Keep browser memory reasonable and allow many tabs
    shm_size: "1gb"