services:
  datahub:
    build: .
    image: martinhal-datahub:2.3
    container_name: martinhal-datahub
    restart: unless-stopped
    ports:
      # host:container — change the left number to expose a different host port
      - "3000:3000"
    environment:
      # ---- Server ----
      PORT: "3000"
      # IMPORTANT: set a long random value (e.g. `openssl rand -hex 32`)
      SESSION_SECRET: "${SESSION_SECRET:-please-change-this-to-a-long-random-string}"
      # set "true" only when serving over HTTPS (e.g. behind a TLS reverse proxy)
      COOKIE_SECURE: "${COOKIE_SECURE:-false}"

      # ---- First administrator ----
      # Nothing to configure: on first boot the site shows a setup wizard in
      # the browser that asks you to create the administrator account.

      # ---- SMTP (optional). If unset, emails are logged to the audit outbox ----
      SMTP_HOST: "${SMTP_HOST:-}"
      SMTP_PORT: "${SMTP_PORT:-587}"
      SMTP_SECURE: "${SMTP_SECURE:-false}"
      SMTP_USER: "${SMTP_USER:-}"
      SMTP_PASS: "${SMTP_PASS:-}"
      MAIL_FROM: "${MAIL_FROM:-Infosec <no-reply@example.com>}"
    volumes:
      # Persist the database, uploaded files, and brand images across restarts.
      - datahub-data:/app/data
      - datahub-uploads:/app/uploads
      - datahub-brand:/app/brand
      - datahub-avatars:/app/avatars

volumes:
  datahub-data:
  datahub-uploads:
  datahub-brand:
  datahub-avatars: