services:
  foundry:
    build:
      context: .
      dockerfile: Dockerfile
      target: runtime
      args:
        FOUNDRY_BUILD_VERSION: "${FOUNDRY_BUILD_VERSION:-}"
        FOUNDRY_BUILD_COMMIT: "${FOUNDRY_BUILD_COMMIT:-}"
        FOUNDRY_BUILD_DATE: "${FOUNDRY_BUILD_DATE:-}"
    container_name: foundry
    ports:
      - "${FOUNDRY_PUBLISH_ADDR:-8080}:8080"
    environment:
      # Local-development defaults only. Use docker-compose.prod.yml for
      # hardened deployments with explicit secrets.
      FOUNDRY_ADMIN_SESSION_SECRET: "${FOUNDRY_ADMIN_SESSION_SECRET:-dev-session-secret-change-me}"
      FOUNDRY_ADMIN_TOTP_SECRET_KEY: "${FOUNDRY_ADMIN_TOTP_SECRET_KEY:-MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=}"
    volumes:
      - .:/app
      - foundry_data:/app/data
      - foundry_public:/app/public
    working_dir: /app
    command: ["foundry", "--config-overlay", "content/config/site.docker.yaml", "serve"]
    restart: unless-stopped

volumes:
  foundry_data:
  foundry_public: