docker-compose.yml

services:
  backend:
    build: ./backend
    environment:
      DATABASE_URL: sqlite:////data/elementa.db
      SECRET_KEY: changeme_secret_key_please_update
      ACCESS_TOKEN_EXPIRE_MINUTES: 60
      FIRST_ADMIN_USERNAME: admin
      FIRST_ADMIN_PASSWORD: changeme123
      FIRST_ADMIN_EMAIL: admin@elementa.local
      # For same-server / Cloudflare-tunnel deployments: set this to the internal
      # port Tessera is reachable on from inside Docker (e.g. http://host.docker.internal:8520)
      # so backend→backend calls bypass the public tunnel.
      TESSERA_INTERNAL_URL: ${TESSERA_INTERNAL_URL:-}
    extra_hosts:
      - "host.docker.internal:host-gateway"
    volumes:
      - elementa_data:/data
    ports:
      - "8232:8000"

  frontend:
    build: ./frontend
    ports:
      - "8231:80"
    depends_on:
      - backend

volumes:
  elementa_data: