docker-compose.yml

services:
  db_customer: { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: customer }, ports: ["33061:3306"] }
  db_invoice:  { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: invoice },  ports: ["33062:3306"] }
  db_docs:     { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: documents }, ports: ["33063:3306"] }
  db_extra1:   { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: analytics }, ports: ["33064:3306"] }
  db_extra2:   { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: logistics }, ports: ["33065:3306"] }
  db_meta:     { image: mysql:5.7, platform: linux/amd64, environment: { MYSQL_ROOT_PASSWORD: root, MYSQL_DATABASE: threadline_meta }, ports: ["33066:3306"] }
  web:
    build: .
    ports: ["8080:80"]
    volumes: [".:/var/www/html"]
    environment:
      META_HOST: db_meta
      META_DB: threadline_meta
      META_USER: root
      META_PASS: root
      ADMIN_USER: admin
      ADMIN_PASS: admin
      # LOCAL DEV ONLY default: a committed key means "encrypted" secrets are trivially
      # decryptable by anyone with the repo. MUST be overridden with a unique, secret
      # value per-environment (staging/production) — never reuse this value.
      THREADLINE_SECRET_KEY: "01234567890123456789012345678901"
      # LOCAL DEV ONLY default: override per-environment to the actual allow-listed hosts.
      THREADLINE_ALLOWED_HOSTS: "db_customer,db_invoice,db_docs,db_extra1,db_extra2,db_meta"
    depends_on: [db_meta, db_customer, db_invoice, db_docs, db_extra1, db_extra2]