Local Deployment & Developer Workflow — Azure DocumentDB

Image choices:

• Gateway (ghcr.io/microsoft/documentdb/documentdb-local:latest) — MongoDB wire protocol on port 10260. Use this for app development.
• psql-only (mcr.microsoft.com/cosmosdb/ubuntu/documentdb-oss:...) — raw PostgreSQL on port 9712. Use only for direct SQL inspection.

Rules

• local-choose-deployment-method — Pick the simplest local option (Gateway, Compose, psql-only, or source) that matches the interface your app actually uses.
• local-docker-compose-setup — Reproducible local stack via docker-compose.yml: pinned images, host.docker.internal, restart: unless-stopped.
• local-connection-config — Connect on port 10260 with --tls, --tlsAllowInvalidCertificates, and SCRAM-SHA-256 for the self-signed local cert.
• local-env-driven-config — Drive connection URI and TLS relaxation from env vars; never default tlsAllowInvalidCertificates=true in code.
• local-sample-data-management — Use SKIP_INIT_DATA + INIT_DATA_PATH with vetted seed scripts; don't ship the built-in sampledb beyond local demos.
• local-ports-and-bindings — Bind published ports to 127.0.0.1 and expose only what you use (10260 for Mongo, 9712 for psql).
• local-prod-parity — Same connection abstraction and versioned index/seed scripts across local and Azure DocumentDB; integration-test against the real container.