services:
  web-news:
    build: .
    container_name: web-news
    ports:
      - '8080:8080'
    volumes:
      - data:/app/data
    environment:
      - PORT=8080
      - NODE_ENV=production
      - AUTH_MODE=none
      - AUTH_TOKEN=${AUTH_TOKEN:-}
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-*}
      - AUTH_FILE=/app/data/accounts.json
      - HASHES_FILE=/app/data/client_hashes.json
      - CACHE_FILE=/app/data/cache.db
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

volumes:
  data: