services:
  web-news:
    build:
      context: .
      dockerfile: Dockerfile
    image: ${DOCKER_IMAGE:-web-news:latest}
    environment:
      - PORT=${PORT:-8080}
      - NODE_ENV=production
      - AUTH_MODE=${AUTH_MODE:-multi}
      - ALLOW_REGISTRATION=${ALLOW_REGISTRATION:-true}
      # Coolify automatically populates SERVICE_URL_WEB_NEWS with the domain
      - ALLOWED_ORIGINS=${SERVICE_URL_WEB_NEWS:-*}
      - AUTH_FILE=/app/data/accounts.json
      - HASHES_FILE=/app/data/client_hashes.json
      - RATE_LIMIT=${RATE_LIMIT:-100}
      - RATE_BURST=${RATE_BURST:-200}
      - CACHE_FILE=/app/data/cache.db
      - PUBLIC_INSTANCE=${PUBLIC_INSTANCE:-true}
    volumes:
      - web-news-data:/app/data
    labels:
      - 'traefik.enable=true'
      - 'traefik.http.middlewares.web-news-ratelimit.ratelimit.average=100'
      - 'traefik.http.middlewares.web-news-ratelimit.ratelimit.burst=50'
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped

volumes:
  web-news-data: