services:
  rfid-database:
    build:
      context: .
      dockerfile: Dockerfile
    image: rfid-database:local
    container_name: rfid-database
    restart: unless-stopped
    ports:
      - "${RFID_PORT:-3000}:3000"
    env_file:
      - .env
    environment:
      NODE_ENV: production
      RFID_DB_PATH: /data/rfid.db
      PORT: "3000"
      HOSTNAME: 0.0.0.0
      AUTH_TRUST_HOST: "true"
      # Optional bootstrap (only creates if missing):
      # CREATE_USER_EMAIL: admin@lab.local
      # CREATE_USER_PASSWORD: change-me
      # CREATE_USER_NAME: Admin
      # Optional OIDC — also set NEXT_PUBLIC_* in .env if using SSO button
      # AUTH_OIDC_ISSUER: ${AUTH_OIDC_ISSUER:-}
      # AUTH_OIDC_CLIENT_ID: ${AUTH_OIDC_CLIENT_ID:-}
      # AUTH_OIDC_CLIENT_SECRET: ${AUTH_OIDC_CLIENT_SECRET:-}
      # AUTH_OIDC_NAME: ${AUTH_OIDC_NAME:-SSO}
    volumes:
      - rfid-data:/data
    healthcheck:
      test: ["CMD", "curl", "-fsS", "http://127.0.0.1:3000/login"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 25s

volumes:
  rfid-data: