# Generic setup: the site on 127.0.0.1:8080. Put the reverse proxy (Traefik labels, networks)
# in a compose.override.yaml and drop the port mapping there if the proxy reaches the
# container over a Docker network. The build context is the repository root, because the
# site reads the plugin catalog, versions and screenshots from it.
services:
  web:
    build:
      context: ..
      dockerfile: website/Dockerfile
      args:
        SITE_URL: ${SITE_URL:-https://fl.narl.io}
    image: bass-foundry-website:latest
    env_file:
      - path: .env
        required: false
    ports:
      - "127.0.0.1:8080:8080"
    restart: unless-stopped
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    logging:
      driver: json-file
      options:
        max-size: "1m"
        max-file: "3"