services:
  nodecast-tv-plus:
    image: nodecast-tv-plus:local
    build: .
    container_name: nodecast-tv-plus
    ports:
      - "3000:3000"
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS \"http://127.0.0.1:$${PORT:-3000}$${NODECAST_BASE_PATH:-}/api/health\" || exit 1"]
      interval: 30s
      timeout: 5s
      start_period: 20s
      retries: 3
    environment:
      NODE_ENV: production
      PORT: 3000 # Internal container port
      JWT_SECRET: ${JWT_SECRET:?Set JWT_SECRET in .env}
      SESSION_SECRET: ${SESSION_SECRET:?Set SESSION_SECRET in .env}
      TOTP_ENCRYPTION_KEY: ${TOTP_ENCRYPTION_KEY:-}
      NODECAST_BASE_PATH: ${NODECAST_BASE_PATH:-}
      TRANSCODE_START_TIMEOUT_SECONDS: ${TRANSCODE_START_TIMEOUT_SECONDS:-15}
      OIDC_ISSUER_URL: ${OIDC_ISSUER_URL:-}
      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID:-}
      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET:-}
      OIDC_CALLBACK_URL: ${OIDC_CALLBACK_URL:-}
      OIDC_AUTH_URL: ${OIDC_AUTH_URL:-}
      OIDC_TOKEN_URL: ${OIDC_TOKEN_URL:-}
      OIDC_USERINFO_URL: ${OIDC_USERINFO_URL:-}
      DISABLE_LOCAL_AUTH: ${DISABLE_LOCAL_AUTH:-false}
      OIDC_AUTO_REDIRECT: ${OIDC_AUTO_REDIRECT:-false}