services:
  app:
    image: ghcr.io/erp-mafia/erp-base:latest
    env_file: .env
    ports:
      - "${PORT:-3000}:3000"
    security_opt:
      - no-new-privileges:true
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/api/health"]
      interval: 30s
      timeout: 5s
      start_period: 10s
      retries: 3

  cron:
    build:
      context: docker
      dockerfile: cron.Dockerfile
    depends_on:
      app:
        condition: service_healthy
    environment:
      - CRON_SECRET=${CRON_SECRET}
      - APP_URL=http://app:3000
    volumes:
      - ./docker/crontab.self-hosted:/etc/supercronic/crontab:ro
    restart: unless-stopped