services:
  stalwart:
    image: stalwartlabs/stalwart:latest
    container_name: stalwart-webui-dev
    restart: unless-stopped
    ports:
      # HTTP management/JMAP API — the only port the WebUI dev proxy needs
      # (see server.proxy in vite.config.ts).
      - "8080:8080"
      # Mail protocols, only needed if you're testing actual mail flows
      # (sending/receiving, not just admin UI screens).
      - "25:25"
      - "587:587"
      - "465:465"
      - "143:143"
      - "993:993"
      - "110:110"
      - "995:995"
      - "4190:4190"
    volumes:
      - stalwart-etc:/etc/stalwart
      - stalwart-data:/var/lib/stalwart
    environment:
      # Disposable local dev credentials — do not reuse for anything real.
      # Break-glass admin, used only by scripts/dev-server-init.sh (its
      # tokens always expire in 1h regardless of server config, so it's
      # not used for day-to-day dev tokens — see scripts/dev-token.sh).
      STALWART_RECOVERY_ADMIN: "admin@example.org:c8321iEscHDy0GWV"

volumes:
  stalwart-etc:
  stalwart-data: