services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
    environment:
      PORT: 8080
      DB_PATH: /data/db/app.sqlite
      MEDIA_ROOT: /data/library/media
      SESSION_SECRET: ${SESSION_SECRET}
      SESSION_SECURE: ${SESSION_SECURE:-true}
      ADMIN_EMAILS: ${ADMIN_EMAILS:-}
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID}
      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET}
      GOOGLE_REDIRECT_URI: ${GOOGLE_REDIRECT_URI}
    volumes:
      - app_db:/data/db
      - /mnt/nas/polish:/data/library
    restart: unless-stopped

  cloudflared:
    image: cloudflare/cloudflared:latest
    command: tunnel --no-autoupdate run --token ${CF_TUNNEL_TOKEN}
    depends_on:
      - app
    restart: unless-stopped

volumes:
  app_db: