furtka/apps/fileshare/docker-compose.yaml

# Furtka fileshare — SMB share via dperson/samba.
#
# The volume `furtka_fileshare_files` is created by the Furtka reconciler
# from the manifest's "volumes" list before this compose file is brought up;
# it's referenced as `external: true` here so docker compose doesn't try
# to manage its lifecycle.
#
# TODO(image-pin): `:latest` is shaky for production — pin to a digest
# (`dperson/samba@sha256:...`) or a stable tag once we've verified one
# against the upstream registry. For the MVP run we accept the drift
# risk to keep the install reproducible against whatever the upstream
# image happens to be on test day; revisit before any non-developer
# touches this.

services:
  smbd:
    image: dperson/samba:latest
    restart: unless-stopped
    network_mode: host
    environment:
      - USERID=1000
      - GROUPID=1000
      - TZ=Europe/Berlin
    command: >
      -u "${SMB_USER};${SMB_PASSWORD}"
      -s "files;/mount;yes;no;no;${SMB_USER}"
      -p
    volumes:
      - furtka_fileshare_files:/mount

volumes:
  furtka_fileshare_files:
    external: true