version: '3.8'

services:
  nuxt-app:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: analiticanucleo-nuxt-app
    restart: unless-stopped
    environment:
      - NODE_ENV=production
      # Nuxt runtime config variables (prefijo NUXT_)
      - NUXT_SUPABASE_URL=${SUPABASE_URL}
      - NUXT_SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY}
      # Variables originales para compatibilidad
      - SUPABASE_URL=${SUPABASE_URL}
      - SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY}
      - NEXT_PUBLIC_SUPABASE_URL=${SUPABASE_URL}
      - NEXT_PUBLIC_SUPABASE_ANON_KEY=${SUPABASE_ANON_KEY}
      # Authentik configuration
      - NUXT_PUBLIC_AUTHENTIK_URL=${AUTHENTIK_URL}
      - NUXT_PUBLIC_AUTHENTIK_APP_SLUG=${AUTHENTIK_APP_SLUG}
    networks:
      - principal
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.analiticanucleo.rule=Host(`analitica.nucleoriofrio.com`)"
      - "traefik.http.routers.analiticanucleo.entrypoints=websecure"
      - "traefik.http.routers.analiticanucleo.tls=true"
      - "traefik.http.routers.analiticanucleo.tls.certresolver=letsencrypt"
      - "traefik.http.services.analiticanucleo.loadbalancer.server.port=3000"
      - "traefik.docker.network=principal"

networks:
  principal:
    external: true