services:
  proxy:
    build: .
    container_name: api-proxy
    restart: unless-stopped
    ports:
      - "8080:8080"
      - "8443:8443"
    env_file: .env
    volumes:
      # Mount TLS certs (optional — HTTPS disabled if files are absent)
      # Place tls.crt and tls.key in ./ssl/ directory
      - ./ssl:/etc/nginx/ssl:ro
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:8080/health"]
      interval: 30s
      timeout: 5s
      retries: 3
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "5"