version: '3.8'

services:
  capsule:
    build: .
    container_name: capsule-budget
    ports:
      - "7654:7654"
    volumes:
      # Persist user data outside container
      - ./data:/app/data
    environment:
      - NODE_ENV=production
      # Generate a secure key: openssl rand -base64 32
      - ENCRYPTION_KEY=${ENCRYPTION_KEY:-change-this-to-a-secure-key}
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:7654"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s