# Deploy stack for the avriahost VPS (Docker + Caddy).
# Lives in /docker/info-share-spot.
#
# This VPS fronts everything with Caddy (container `root-caddy-1`), NOT Traefik.
# Caddy holds :80/:443, terminates TLS with automatic Let's Encrypt, and routes
# by hostname from /root/Caddyfile. It shares the external `web` network with
# this app, so it reaches us as `info-share-spot:3000` — no published host port.
#
# Route lives in /root/Caddyfile:
#   info-share-spot.srv1720881.hstgr.cloud { reverse_proxy info-share-spot:3000 }

services:
  app:
    build: .
    image: info-share-spot:latest
    container_name: info-share-spot
    restart: unless-stopped
    # Runtime secrets (SUPABASE_SERVICE_ROLE_KEY) live here — gitignored, not in the repo.
    env_file:
      - path: .env.secret
        required: false
    environment:
      # SSR runtime vars (public-safe). Compose substitutes these from the .env
      # file next to this compose file.
      SUPABASE_URL: ${SUPABASE_URL}
      SUPABASE_PUBLISHABLE_KEY: ${SUPABASE_PUBLISHABLE_KEY}
      HOST: 0.0.0.0
      PORT: 3000
    networks:
      - web

networks:
  web:
    external: true