# The WristCode gateway as one container with one SQLite file. Put it behind a reverse proxy that
# serves HTTPS on a public name, such as wristcode.example.com, and forwards to port 8080. The
# watch needs that name reachable over cellular.
#
# .env beside this file (mode 600). See .env.example.
#
# Operator CLI: docker compose exec gateway wristcode <host add|pair|host list|device list|...>
services:
  gateway:
    image: ${WRISTCODE_IMAGE:-wristcode-gateway:latest}
    build:
      context: ../gateway
      dockerfile: Containerfile
    container_name: wristcode-gateway
    env_file: [.env]
    ports:
      - "127.0.0.1:8080:8080"   # for a proxy on the same machine. Drop it if the proxy shares a network.
    volumes:
      - ./data:/data            # the image runs as uid 1000, which must be able to write here
    restart: unless-stopped
    healthcheck:
      test: wget -qO- http://127.0.0.1:8080/v1/health || exit 1
      interval: 30s
      start_period: 10s