services:
  backend:
    build:
      context: ./backend
    environment:
      DATABASE_URL: file:./dev.db
      JWT_SECRET: ${JWT_SECRET:?Set JWT_SECRET in Dokploy secrets}
      FRONTEND_ORIGIN: https://basetracker.lona-development.org
      COOKIE_SECURE: "true"
    volumes:
      - backend-data:/app/dev.db
      - backend-uploads:/app/uploads
    ports:
      - "4000:4000"
    expose:
      - "4000"
    labels:
      - traefik.enable=true
      - traefik.http.routers.backend.rule=Host(`backend.basetracker.lona-development.org`)
      - traefik.http.routers.backend.entrypoints=websecure
      - traefik.http.routers.backend.tls.certresolver=letsencrypt
      - traefik.http.services.backend.loadbalancer.server.port=4000

volumes:
  backend-data:
  backend-uploads: