services:
  api-server:
    build:
      context: .
      dockerfile: Dockerfile
    image: drivervault-api
    container_name: drivervault-api
    restart: unless-stopped
    ports:
      - "${PORT:-8080}:8080"
    environment:
      # Container always listens on 8080; map the host port above.
      PORT: "8080"
      # External PocketBase instance (all DB access goes through this server).
      PB_URL: "${PB_URL:-http://10.2.1.10:8027}"
      # Superuser service account. Leave unset and the server still starts — a
      # superadmin can configure it from the panel; management endpoints 503 until then.
      PB_ADMIN_EMAIL: "${PB_ADMIN_EMAIL}"
      PB_ADMIN_PASSWORD: "${PB_ADMIN_PASSWORD}"
      # Browser origins allowed by CORS (native apps are exempt).
      CORS_ALLOW_ORIGINS: "${CORS_ALLOW_ORIGINS:-http://localhost:5173}"
      AUTH_USERS_COLLECTION: "${AUTH_USERS_COLLECTION:-users}"