services:
  visitor-signin:
    build: .
    image: visitor-signin:latest
    container_name: visitor-signin
    restart: unless-stopped
    env_file:
      - .env
    ports:
      - "${HOST_PORT:-8088}:3000"
    volumes:
      # Database, visitor photos and (optionally) TLS certs live here.
      - ./data:/data
      # Google service account key, if you mount it as a file rather than base64 in .env.
      - ./secrets:/secrets:ro
    healthcheck:
      test: ["CMD", "node", "scripts/healthcheck.mjs"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s