# Auto-Deploy per Tag-Push – siehe DEPLOY.md. Zustandsloser Service, keine
# Volumes, keine Laufzeit-Env. NPM proxyt api-sign.skrift.de intern an
# skrift-signature-service:8000 (kein Port-Mapping).
name: skrift-signature-service

services:
  app:
    image: skrift-signature-service:${IMAGE_TAG:-latest}
    build: .
    container_name: skrift-signature-service
    restart: unless-stopped
    networks:
      - nginx-proxy-manager_default
    # Gate für `--wait`; „/" ist der Health-Endpoint des FastAPI-Services.
    # Python-Image → kein node/curl, daher urllib.
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request,sys; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:8000/').status==200 else 1)"]
      interval: 60s
      timeout: 5s
      retries: 3

networks:
  nginx-proxy-manager_default:
    external: true