services:
  codevault:
    build: .
    image: codevault:latest
    restart: unless-stopped
    ports:
      - "127.0.0.1:8080:8080"
      - "127.0.0.1:9092:9092"
    volumes:
      # config.yaml's database.path should point inside this volume, e.g. /app/data/codevault.db.
      # server.trusted_proxies must list the nginx container/network's actual IP or CIDR
      # (gin needs IPs/CIDRs, not hostnames) - e.g. this compose network's subnet.
      - ./config.yaml:/app/config.yaml:ro
      - codevault-data:/app/data
    logging:
      driver: json-file
      options:
        max-size: "50m"
        max-file: "3"
    deploy:
      resources:
        limits:
          cpus: "1.0"
          memory: 256M
        reservations:
          cpus: "0.25"
          memory: 64M

volumes:
  codevault-data: