services:
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    ports:
      - "${BACKEND_PORT:-8443}:8000"
    volumes:
      - ./backend/.env:/app/.env:ro
      - ./backend/google-sa.json:/app/google-sa.json:ro
      - ./certs:/app/certs:ro
    restart: unless-stopped
    networks:
      - nexus-network

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    ports:
      - "${FRONTEND_PORT:-443}:3000"
    volumes:
      - ./certs:/app/certs
    environment:
      - NODE_ENV=production
      - PORT=3000
      - ORIGIN=${FRONTEND_ORIGIN:-https://localhost}
      - PUBLIC_API_URL=${PUBLIC_API_URL:-https://localhost:8443/api}
    restart: unless-stopped
    depends_on:
      - backend
    networks:
      - nexus-network

networks:
  nexus-network:
    driver: bridge