services:
  certgen:
    image: alpine:3.20
    container_name: certgen
    working_dir: /work
    volumes:
      - ./certs:/work
    environment:
      CERT_PASSWORD: "${CERT_PASSWORD:-changeit}"
    command: ["/bin/sh","-c","apk add --no-cache openssl && chmod +x gen-certs.sh && ./gen-certs.sh"]

  gotek-backend:
    build: .
    container_name: gotek-backend
    depends_on:
      certgen:
        condition: service_completed_successfully
    ports:
      - "8080:8080"
      - "8443:8443"
    environment:
      CERT_PASSWORD: "${CERT_PASSWORD:-changeit}"
      ASPNETCORE_URLS: "http://0.0.0.0:8080;https://0.0.0.0:8443"
      ASPNETCORE_Kestrel__Certificates__Default__Path: "/certs/server.pfx"
      ASPNETCORE_Kestrel__Certificates__Default__Password: "${CERT_PASSWORD:-changeit}"
    volumes:
      - ./Images:/app/Images
      - ./Uploaded:/app/Uploaded
      - ./certs:/certs:ro
      - ./FF.CFG:/app/FF.CFG:ro
    restart: unless-stopped