services:
  app:
    image: ${IMAGE}
    container_name: wisp
    restart: unless-stopped
    pull_policy: always
    ports:
      - "${HOST_PORT:-3040}:3000"
    environment:
      - TTL_SECONDS=${TTL_SECONDS:-259200}
      - MAX_UPLOAD_BYTES=${MAX_UPLOAD_BYTES:-209715200}
      - UPLOAD_PASSWORD=${UPLOAD_PASSWORD}
    volumes:
      # Named volume, not a bind mount into the build context — the SQLite
      # DB and ciphertext blobs live here and must survive image redeploys.
      - wisp-data:/app/data

volumes:
  wisp-data: