services:
  backend:
    image: gitea.kzbikowski.pl/kzbkowski/whowhat/backend:latest
    environment:
      JWT_SECRET: ${JWT_SECRET:-please-change-this-secret-in-.env}
      DATABASE_PATH: /app/data/app.db
      PORT: 3000
      FRONTEND_URL: ${FRONTEND_URL:-https://example.com}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_SECURE: ${SMTP_SECURE:-false}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASS: ${SMTP_PASS:-}
      SMTP_FROM: ${SMTP_FROM:-}
    volumes:
      - ./sqlite:/app/data
    networks:
      - default
    restart: unless-stopped

  frontend:
    image: gitea.kzbikowski.pl/kzbkowski/whowhat/frontend:latest
    ports:
      - "8856:80"
    depends_on:
      - backend
    networks:
      - default
      - traefik_public
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik_public
      - traefik.http.routers.whowhat.rule=Host(`${DOMAIN:-example.com}`)
      - traefik.http.routers.whowhat.entrypoints=websecure
      - traefik.http.routers.whowhat.tls.certresolver=tls-resolver
      - traefik.http.routers.whowhat.tls=true
    restart: unless-stopped

networks:
  default:
  traefik_public:
    external: true
    name: ${TRAEFIK_NETWORK:-traefik_public}