docker-compose.yml

services:
  selfstack:
    build:
      context: .
      args:
        # NEXT_PUBLIC_* is inlined into the client bundle at build time, so
        # demo mode must be set here (build), not only under `environment`.
        # Rebuild after changing: `docker compose up -d --build`.
        NEXT_PUBLIC_DEMO_MODE: "${NEXT_PUBLIC_DEMO_MODE:-false}"
    image: selfstack:latest
    container_name: selfstack
    restart: unless-stopped
    ports:
      - "3026:3026"
    environment:
      DATABASE_URL: "file:/data/selfstack.db"
      # Change this in production! Generate with:
      #   node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"
      JWT_SECRET: "${JWT_SECRET:-change-me-in-production}"
      # Public base URL (used in outgoing emails). Override via env or Admin UI.
      APP_URL: "${APP_URL:-http://localhost:3026}"
      # Hard-disable self-registration regardless of the admin UI toggle.
      DISABLE_REGISTRATION: "${DISABLE_REGISTRATION:-}"
      # Demo mode: also passed as a build arg above (client bundle needs it at
      # build time). Kept here so server code + instrumentation reset agree.
      NEXT_PUBLIC_DEMO_MODE: "${NEXT_PUBLIC_DEMO_MODE:-false}"
      # How often the demo DB is wiped + re-seeded (server-side, runtime only).
      DEMO_RESET_MINUTES: "${DEMO_RESET_MINUTES:-60}"
      # Enable when serving over HTTPS
      # SECURE_COOKIES: "true"
    volumes:
      - selfstack-data:/data
      - selfstack-uploads:/app/public/uploads

volumes:
  selfstack-data:
  selfstack-uploads: