services:
  app:
    image: foufure/gauffre:latest
    build: .
    ports:
      - "3007:3000"
    environment:
      DATABASE_URL: file:/app/data/app.db
      AUTH_SECRET: ${AUTH_SECRET:-change-me-in-production-use-long-random-string}
      ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@lagaufredor.local}
      ADMIN_PASSWORD: ${ADMIN_PASSWORD:-changeme123}
      # Optionnel : rate limiting distribué (sinon fallback mémoire)
      UPSTASH_REDIS_REST_URL: ${UPSTASH_REDIS_REST_URL:-}
      UPSTASH_REDIS_REST_TOKEN: ${UPSTASH_REDIS_REST_TOKEN:-}
    volumes:
      - gauffre-data:/app/data
      - gauffre-uploads:/app/public/uploads
    restart: unless-stopped

volumes:
  gauffre-data:
  gauffre-uploads: