version: '3.8'

services:
  frontend:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "3333:3000"
    volumes:
      - ./app:/app
      - ./app/node_modules
      - ./.env:/app/.env:ro  # Bind-mount .env as read-only
    environment:
      - NODE_ENV=production
    restart: unless-stopped

  supabase:
    image: supabase/postgres:15
    ports:
      - "54322:5432"
    volumes:
      - supabase-data:/var/lib/postgresql/data
    environment:
      POSTGRES_PASSWORD: ${SUPABASE_DB_PASSWORD}
      POSTGRES_USER: postgres
      POSTGRES_DB: postgres
    restart: unless-stopped

volumes:
  supabase-data: