services:
  bookish:
    build: .
    image: bookish:local
    ports:
      - "${PORT:-5000}:5000"
    environment:
      BOOKISH_SECRET: ${BOOKISH_SECRET:?Copia .env.example in .env e imposta BOOKISH_SECRET}
      BOOKISH_DATA_DIR: /data
      BOOKISH_DEBUG: "false"
      BOOKISH_CLEANUP_HOURS: ${BOOKISH_CLEANUP_HOURS:-1}
      # Sicurezza opzionale
      BOOKISH_AUTH_USERNAME: ${BOOKISH_AUTH_USERNAME:-}
      BOOKISH_AUTH_PASSWORD: ${BOOKISH_AUTH_PASSWORD:-}
      BOOKISH_RATE_LIMIT_UPLOAD: ${BOOKISH_RATE_LIMIT_UPLOAD:-20}
      PORT: "5000"
    volumes:
      - bookish-data:/data
    restart: unless-stopped
    mem_limit: 1g
    cpus: "1.0"
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp
    stop_grace_period: 30s

volumes:
  bookish-data: