services:
  auth:
    build: .
    ports:
      - "3001:3001"
    environment:
      BETTER_AUTH_SECRET: "${BETTER_AUTH_SECRET:-change-me-generate-with-openssl-rand-base64-32}"
      BETTER_AUTH_URL: "${BETTER_AUTH_URL:-http://localhost:3001}"
      DATABASE_PATH: /app/data/auth.db
    volumes:
      - auth-data:/app/data
    restart: unless-stopped

volumes:
  auth-data: