# fly.io deployment for agentmemory.
#
# The HMAC secret is generated by entrypoint.sh on first boot and persisted
# to the mounted volume at /data/.hmac. Operator copies it once from
# `fly logs` then never sees it again. To rotate: `fly ssh console` and
# `rm /data/.hmac`, then `fly machine restart`.
#
# Only port 3111 (REST API) is exposed publicly. Viewer 3113 stays bound
# to localhost inside the machine; reach it via `fly proxy 3113:3113`.

app = "agentmemory"
primary_region = "iad"

[build]
  dockerfile = "Dockerfile"

[[mounts]]
  source = "agentmemory_data"
  destination = "/data"
  initial_size = "1gb"

[http_service]
  internal_port = 3111
  force_https = true
  auto_stop_machines = "stop"
  auto_start_machines = true
  min_machines_running = 0
  processes = ["app"]

  [http_service.concurrency]
    type = "requests"
    soft_limit = 200
    hard_limit = 250

  [[http_service.checks]]
    interval = "30s"
    timeout = "5s"
    grace_period = "30s"
    method = "GET"
    path = "/agentmemory/livez"

[[vm]]
  size = "shared-cpu-1x"
  memory = "512mb"