services:
  web:
    build: .
    ports:
      - "5000:5000"
    volumes:
      - ./data:/app/data
    environment:
      - FLASK_ENV=production
      - SECRET_KEY=st_dashboard_prod_sk_2026_x7k9m3
      - CACHE_TYPE=SimpleCache
      - SESSION_COOKIE_SECURE=false
      - ISSUED_TEAM_ID=chaoyang
      - SERVER_ROLE=master
      - PEER_URL=https://chaofenghui-short-track.hf.space
      - SYNC_SECRET=st_sync_secret_2026
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/ping')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  # Optional: nginx reverse proxy for HTTPS + custom domain
  # Uncomment below and configure SSL certs to enable
  # nginx:
  #   image: nginx:alpine
  #   ports:
  #     - "80:80"
  #     - "443:443"
  #   volumes:
  #     - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
  #     - ./ssl:/etc/nginx/ssl:ro
  #   depends_on:
  #     - web
  #   restart: unless-stopped