docker-compose.solid-pods.yml

# Cloudflare Tunnel sidecar for the native pod mesh.
#
# solid-pod-rs-server runs INSIDE the agentbox container (supervisord program
# [solid-pod], built via lib/solid-pod-rs.nix alpha.15). This compose overlay
# adds only the cloudflared connector that tunnels
#   pods-native.dreamlab-ai.com → solid-pod-server:8484
# into the agentbox network.
#
# Usage (from the agentbox directory):
#   docker compose -f docker-compose.yml \
#                  -f docker-compose.solid-pods.yml \
#                  --env-file .env.solid-pods \
#                  up -d cloudflared-pod
#
# Required env vars (.env.solid-pods):
#   CLOUDFLARE_TUNNEL_TOKEN   — from Zero Trust → Tunnels → dreamlab-native-pods

services:

  cloudflared-pod:
    image: cloudflare/cloudflared:latest
    container_name: cloudflared-pod
    restart: unless-stopped
    command: tunnel --no-autoupdate run
    environment:
      - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN:?CLOUDFLARE_TUNNEL_TOKEN must be set}
    networks:
      - visionclaw

networks:
  visionclaw:
    external: true
    name: visionclaw_network