version: '3.8'

services:
  provisioning-server:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: provisioning-server
    ports:
      - "8083:8083"
    environment:
      - SERVER_HOST=0.0.0.0
      - SERVER_PORT=8083
      - JWT_SECRET=${JWT_SECRET:-change-me-in-production}
      - TOKEN_EXPIRY_HOURS=24
      - REFRESH_TOKEN_EXPIRY_HOURS=168
      - PROVISIONING_CLI_PATH=/usr/local/bin/provisioning
      - OPERATION_TIMEOUT=300
      - LOG_LEVEL=info
      - CORS_ENABLED=true
    volumes:
      - ./config.toml:/etc/provisioning-server/config.toml:ro
      - ./logs:/var/log/provisioning-server
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8083/health"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s
    networks:
      - provisioning-network

networks:
  provisioning-network:
    driver: bridge