docker-compose.yml

services:
# ─── PinchPad (API + UI Single Container) ─────────────────────────────────
  pinchpad:
    image: ghcr.io/clawstackstudios/pinchpad:main
    container_name: pinchpad
    ports:
      - "8282:8282"
    # ─── Docker Bind Mount for SQLite Database ───────
    volumes:
      - ./data:/app/data
    environment:
      - NODE_ENV=production
      - PORT=8282
      # CORS_ORIGIN: leave unset to allow all origins, or set to restrict (e.g. http://yourdomain.com)
      # DB_ENCRYPTION_KEY: Generate with: openssl rand -base64 32
      - DB_ENCRYPTION_KEY=${DB_ENCRYPTION_KEY:-}
      # PUID/PGID: Set to your user:group ID for proper file ownership (default 1000:1000)
      - PUID=1000
      - PGID=1000
    healthcheck:
      test: ["CMD", "wget", "-qO-", "http://localhost:8282/api/health"]
      interval: 15s
      timeout: 10s
      retries: 5
      start_period: 15s