docker-compose.yml

services:
  droidmate:
    build: .
    container_name: droidmate_app
    restart: unless-stopped
    ports:
      # CHANGE: Bind only to localhost so strictly Nginx manages access
      - "127.0.0.1:5000:5000"
    environment:
      # CHANGE: Use your real domain here
      - SERVER_NAME=geniehelper.info
      - PREFERRED_URL_SCHEME=https
      - HOST=0.0.0.0
      - PORT=5000
      - ENVIRONMENT=production
      - DOCKER_ENABLED=true
      # CRITICAL: Generate a strong random key for session security
      - SECRET_KEY=Generat3_A_Str0ng_R@ndom_K3y_Here_!!
    volumes:
      - ./files:/app/files
      - ./files.db:/app/files.db
      - ./tasks.db:/app/tasks.db
      - ./logs:/app/logs
      - ./config/default.yaml:/app/config/default.yaml
    deploy:
      resources:
        limits:
          cpus: '1.0'
          memory: 1G

networks:
  default:
    name: droidmate_net