docker-compose.yml

name: frameiq

services:

  web:
    build: .
    image: frameiq-app:latest
    restart: unless-stopped
    ports:
      - "127.0.0.1:8002:8080"   # internal only — host nginx proxies to this
    environment:
      # ── Database (Neon — passed from .env) ────────────────────────────────
      DATABASE_URL: ${DATABASE_URL}

      # ── App ────────────────────────────────────────────────────────────────
      APP_ENV: "production"
      SECRET_KEY: ${SECRET_KEY}
      FLASK_DEBUG: "false"

      # ── Gunicorn (override in .env if needed) ──────────────────────────────
      WEB_WORKERS: ${WEB_WORKERS:-2}
      WEB_THREADS: ${WEB_THREADS:-4}

      # ── External APIs ──────────────────────────────────────────────────────
      TMDB_API_KEY: ${TMDB_API_KEY}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      CHROMA_API_KEY: ${CHROMA_API_KEY}
      CHROMA_TENANT: ${CHROMA_TENANT}
      CHROMA_DATABASE: ${CHROMA_DATABASE}

      # ── Google OAuth ───────────────────────────────────────────────────────
      GOOGLE_CLIENT_ID: ${GOOGLE_CLIENT_ID}
      GOOGLE_CLIENT_SECRET: ${GOOGLE_CLIENT_SECRET}

      # ── Cloudinary ─────────────────────────────────────────────────────────
      CLOUDINARY_CLOUD_NAME: ${CLOUDINARY_CLOUD_NAME}
      CLOUDINARY_API_KEY: ${CLOUDINARY_API_KEY}
      CLOUDINARY_API_SECRET: ${CLOUDINARY_API_SECRET}

      # ── Email (optional) ───────────────────────────────────────────────────
      MAIL_SERVER: ${MAIL_SERVER:-}
      MAIL_PORT: ${MAIL_PORT:-587}
      MAIL_USE_TLS: ${MAIL_USE_TLS:-true}
      MAIL_USERNAME: ${MAIL_USERNAME:-}
      MAIL_PASSWORD: ${MAIL_PASSWORD:-}
      MAIL_DEFAULT_SENDER: ${MAIL_DEFAULT_SENDER:-noreply@frameiq.studio}
    networks:
      - frameiq

networks:
  frameiq:
    driver: bridge