services:
  kids-calendar:
    build:
      # Docker/BuildKit clones the repo itself at build time — no manual
      # git clone onto the array needed. Requires the repo to allow
      # anonymous HTTP read access in Gitea (Settings → Visibility →
      # Public); this is a read-only clone, so nothing beyond that is
      # needed. #main is the branch to build from.
      context: https://git.oservr.com/ort/KCal.git#main
      dockerfile: Dockerfile
    container_name: kids-calendar
    ports:
      - "3007:3007"
    volumes:
      # Unraid convention: bind-mount to /mnt/user/appdata so it shows up
      # in the Docker tab, gets picked up by appdata backup plugins, etc.
      # Create this folder before first run (see UNRAID.md).
      - /mnt/user/appdata/kids-calendar:/app/data
    environment:
      - SESSION_SECRET=${SESSION_SECRET:?set a long random value in .env}
      - COOKIE_SECURE=${COOKIE_SECURE:-false}
      - DISABLE_PUBLIC_SIGNUP=${DISABLE_PUBLIC_SIGNUP:-false}
      - VAPID_PUBLIC_KEY=${VAPID_PUBLIC_KEY:-}
      - VAPID_PRIVATE_KEY=${VAPID_PRIVATE_KEY:-}
      - VAPID_SUBJECT=${VAPID_SUBJECT:-}
    restart: unless-stopped