services:
  web-news:
    build:
      context: .
      dockerfile: Dockerfile
    image: ${DOCKER_IMAGE:-web-news:latest}
    environment:
      - PORT=${PORT:?8080}
      - NODE_ENV=production
      - AUTH_MODE=multi
      # Coolify automatically populates SERVICE_URL_WEB_NEWS with the domain
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS:-${SERVICE_URL_WEB_NEWS:-*}}
      - AUTH_FILE=/app/data/accounts.json
      - HASHES_FILE=/app/data/client_hashes.json
    volumes:
      - web-news-data:/app/data
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

volumes:
  web-news-data: