version: "3.9"
services:
  fleetledger:
    build: .
    container_name: fleetledger
    ports:
      - "8000:8000"
    environment:
      - DATABASE_PATH=/app/data/fleetledger.db
      # SESSION_SECRET must be provided (e.g. via .env) and should be long and random
      - SESSION_SECRET=${SESSION_SECRET:?Set SESSION_SECRET in your environment}
      # Set to 0 only for local HTTP testing; keep secure (default) in production
      - SESSION_COOKIE_SECURE=${SESSION_COOKIE_SECURE:-1}
      # Optional: encryption key for management passwords (Fernet key)
      # - ENCRYPTION_KEY=your_fernet_key_here
    volumes:
      - ./data:/app/data
    restart: unless-stopped