version: '3.8'

services:
  bi-ccc:
    build: .
    container_name: bi-ccc
    restart: unless-stopped
    ports:
      - "3080:3080"
    environment:
      # Netbird VPN Setup Key
      - NETBIRD_SETUP_KEY=${NETBIRD_SETUP_KEY:-14A782C8-24D2-46A9-B427-A422854E9B50}
      - NETBIRD_MANAGEMENT_URL=${NETBIRD_MANAGEMENT_URL:-https://netbird.cambioreal.com}
      - NETBIRD_HOSTNAME=${NETBIRD_HOSTNAME:-bi-ccc}

      # MySQL RDS Connection (via Netbird)
      - MYSQL_URL=${MYSQL_URL}
      - USER_MYSQL=${USER_MYSQL}
      - PW_MYSQL=${PW_MYSQL}

      # App Config
      - SESSION_SECRET=${SESSION_SECRET:-bi-agentes-secret-key-change-me}
      - PORT=3080
      - AWESOME_API_TOKEN=${AWESOME_API_TOKEN:-2dbcf6a26f9bd9016859a2d31f99fbd8fc9ac4e9e8e440d94002ac3b436a747a}
    volumes:
      # Persist SQLite database
      - ./data:/app/data
      # Persist NetBird config (keeps same peer/IP between restarts)
      - ./netbird:/var/lib/netbird
    cap_add:
      # Required for Netbird VPN
      - NET_ADMIN
      - SYS_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    sysctls:
      - net.ipv4.ip_forward=1
      - net.ipv6.conf.all.disable_ipv6=0
    networks:
      - bi-network

networks:
  bi-network:
    driver: bridge