docker-compose.prod.yml

services:
  # Visual UI for uploading and managing files
  filebrowser:
    image: filebrowser/filebrowser:latest
    container_name: filebrowser_ui
    user: "0:0"
    restart: unless-stopped
    volumes:
      - fotos_data:/srv
      - filebrowser_db:/database
      - ./init-filebrowser.sh:/script/init-filebrowser.sh:ro
    environment:
      - FB_USER=${FB_USER:-admin}
      - FB_PASS=${FB_PASSWORD:-admin}
      - FB_PORT=${FB_PORT:-80}
    # No ports exposed in production (reverse proxy should handle this)
    # The external script initializes the DB with custom .env credentials on first boot
    entrypoint: /bin/sh /script/init-filebrowser.sh

  # API serving files with open CORS
  api_fotos:
    image: nginx:alpine
    container_name: api_fotos_cors
    restart: unless-stopped
    volumes:
      - fotos_data:/usr/share/nginx/html:ro
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
    # No ports exposed in production (reverse proxy should handle this)
    # Using full custom nginx.conf to natively run as root without hacky bash commands

volumes:
  # Volumes managed automatically by Docker (Plug & Play)
  fotos_data:
  filebrowser_db: