# Base / production config. Run alone with: docker compose -f compose.yml up
# Plain `docker compose up` also merges compose.override.yml for development.
services:
  web:
    build: .
    ports:
      - "3000:3000"
    # Explicit behaviour toggles (the app is environment-agnostic — see AGENTS.md).
    # Supply COOKIE_SECRET / CSRF_SECRET via env; REQUIRE_SECURE_SECRETS refuses dev throwaways.
    environment:
      CACHE_TEMPLATES: "true"
      REQUIRE_SECURE_SECRETS: "true"
    restart: unless-stopped