# Déploiement serveur : app seule ; HTTPS géré par Nginx + Certbot sur l’hôte.
# Exemple Nginx : proxy_pass http://127.0.0.1:3007;
#
# Usage :
#   export AUTH_SECRET="$(openssl rand -base64 32)"
#   docker compose -f docker-compose.server.yml up -d

name: gauffre-server

services:
  app:
    image: foufure/gauffre:latest
    build: .
    ports:
      - "${HOST_PORT:-3007}:3000"
    environment:
      DATABASE_URL: file:/app/data/app.db
      AUTH_SECRET: ${AUTH_SECRET:-change-me-in-production-use-long-random-string}
      ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@lagaufredor.local}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-changeme123}
      NODE_ENV: production
      UPSTASH_REDIS_REST_URL: ${UPSTASH_REDIS_REST_URL:-}
      UPSTASH_REDIS_REST_TOKEN: ${UPSTASH_REDIS_REST_TOKEN:-}
      GOOGLE_PLACES_API_KEY: ${GOOGLE_PLACES_API_KEY:-}
      GOOGLE_PLACE_ID: ${GOOGLE_PLACE_ID:-}
    volumes:
      - gauffre-data:/app/data
      - gauffre-uploads:/app/public/uploads
    restart: unless-stopped

volumes:
  gauffre-data:
  gauffre-uploads: