services:
  position-tracker:
    build: .
    container_name: position-tracker
    restart: unless-stopped
    env_file: .env
    ports:
      - "3457:3457"      # internal only; Traefik handles external
    volumes:
      - ./data:/app/data  # SQLite persistence
    networks:
      - dokploy-network
    labels:
      # Traefik routing
      - "traefik.enable=true"
      - "traefik.http.routers.position-tracker.rule=Host(`angel.manohargupta.com`)"
      - "traefik.http.routers.position-tracker.entrypoints=websecure"
      - "traefik.http.routers.position-tracker.tls=true"
      - "traefik.http.routers.position-tracker.tls.certresolver=letsencrypt"
      - "traefik.http.services.position-tracker.loadbalancer.server.port=3457"
      # Security headers middleware (reuse existing if defined, or inline)

networks:
  dokploy-network:
    external: true