# hecate/docker-compose.yml
#
# Joins Mythic's own Docker network so nginx can reach
# mythic_nginx directly by container name — no proxies,
# no host bridging, no socat.
#
# Usage:
#   docker compose up -d --build
#   → https://localhost:3100   (self-signed cert — browser warning expected once)
#
# Override the host port via env or .env file:
#   HECATE_PORT=8443 docker compose up -d
#
# Requires Mythic to be running first (creates mythic_default network).
# Verify the network name with: docker network ls | grep mythic

services:
  hecate:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: hecate
    restart: unless-stopped
    ports:
      - "${HECATE_PORT:-3100}:443"
    volumes:
      - hecate-ssl:/etc/nginx/ssl   # persist self-signed cert across rebuilds
    networks:
      - mythic-net  # join Mythic's network to reach mythic_nginx directly

volumes:
  hecate-ssl:

networks:
  mythic-net:
    external: true
    name: mythic_default  # Mythic's network — created by Mythic's docker-compose