services:
  mouse-manager:
    build:
      context: .
      dockerfile: Dockerfile
    image: mouse-manager:latest
    container_name: mouse-manager
    restart: unless-stopped
    ports:
      - "${MOUSE_MANAGER_PORT:-8000}:8000"
    volumes:
      # 持久化存储 SQLite 数据库与上传文件 (群晖 NAS 对应共享文件夹)
      - ./data:/app/data
      # 启动脚本需要为 Excel 补充读取权限；应用降权后不会取得目录所有权
      - ./excel:/app/excel
    environment:
      # 留空时自动生成 32 位密钥并保存到 data/.secret_key
      - SECRET_KEY=${SECRET_KEY:-}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:?请在 .env 配置初始管理员密码}
      - DATA_DIR=/app/data
      - TZ=Asia/Shanghai
      - PORT=8000
    security_opt:
      - no-new-privileges:true