version: "3.8"

services:
  sneaky-klaus:
    image: git.thesatelliteoflove.com/phil/sneakyklaus:latest
    container_name: sneaky-klaus
    restart: unless-stopped
    ports:
      - "8000:8000"
    environment:
      # Required: Generate a secure secret key
      # Example: python -c "import secrets; print(secrets.token_hex(32))"
      - SECRET_KEY=${SECRET_KEY:?SECRET_KEY is required}

      # Required for production email sending
      - RESEND_API_KEY=${RESEND_API_KEY:-}

      # Email sender address (must be verified with Resend)
      - EMAIL_FROM=${EMAIL_FROM:-noreply@example.com}

      # Public URL of your application (used for magic links)
      - APP_URL=${APP_URL:-http://localhost:8000}

      # Set to 'development' for testing (logs emails instead of sending)
      - FLASK_ENV=${FLASK_ENV:-production}
    volumes:
      # Persistent storage for SQLite database and sessions
      - sneaky-klaus-data:/app/data
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s

volumes:
  sneaky-klaus-data:
    driver: local