services:
  nginx:
    build: .
    image: sphere-frontend
    container_name: sphere-frontend
    restart: unless-stopped
    ports:
      - "3010:80"
    # The image bakes __RUNTIME_*__ placeholders; deploy/runtime-config.sh
    # rewrites them from these env vars at container start (same contract the
    # ECS task def uses). Defaults below point a local run at staging.
    environment:
      SPHERE_API_URL: https://quest-api.staging.unicity.network
      WALLET_API_URL: https://wallet-api.staging.unicity.network
      REQUIRE_WALLET_API: "true"
      DEV_PORTAL_URL: https://developers.staging.unicity.network/
      # Required only while subscriptions are OFF (below); ignored when they're
      # on. With SUBSCRIPTION_ENABLED=false the container refuses to start
      # without it.
      AGGREGATOR_API_KEY: sk_ddc3cfcc001e4a28ac3fad7407f99590
      # Subscriptions (SGW) ship dormant; set exactly "true" to turn on.
      # The SGW base URL needs no config — the app derives it from the SDK's
      # per-network aggregator gateway and calls it directly (CORS-enabled;
      # unicitynetwork/aggregator-subscription#57). When on, the per-wallet SGW
      # key replaces AGGREGATOR_API_KEY (which is then ignored).
      SUBSCRIPTION_ENABLED: "false"
      PAID_PLANS_ENABLED: "false"