services:
  pst-indexer:
    build: .
    container_name: pst-indexer
    ports:
      - "8000:8000"   # Main app
      - "8001:8001"   # Admin panel
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    environment:
      - DATA_DIR=/app/data
      # Set to "true" when serving over HTTPS
      - COOKIE_SECURE=false
      # Session lifetime in seconds (default 8 hours)
      - SESSION_TTL_SECONDS=28800
      # Optional: provide your own master secret. If set, this becomes the
      # root key for all encryption. If omitted, a random key is generated
      # on first run and persisted in ./data/secret.key (chmod 600).
      # - MASTER_SECRET=change-me-to-a-long-random-string