docker-compose.yml

services:
  fairytale-app:
    image: ghcr.io/scallywer/fairytale:latest
    container_name: fairytale-app
    restart: unless-stopped
    ports:
      - "8889:3000"
    environment:
      - ADMIN_PASSWORD=${ADMIN_PASSWORD}
      - ADMIN_SESSION_SECRET=${ADMIN_SESSION_SECRET}
      - NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-}
      - LOG_JSON=${LOG_JSON:-1}
      # Set to "true" only when a known reverse proxy in front strips
      # incoming X-Forwarded-For / X-Real-IP headers. Without this the
      # values are spoofable and rate limits collapse into a single
      # shared bucket.
      - TRUST_PROXY=${TRUST_PROXY:-false}
    # The SQLite DB and runtime cache must live on a host-mounted volume
    # so user submissions, ratings, comments and analytics survive
    # `docker compose pull && up -d`. Disabling this mount means all
    # writes go into the container's ephemeral layer and are destroyed
    # on every image refresh.
    volumes:
      - ./data:/app/data
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/api/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s