version: '3.8'

services:
  littleshop:
    image: localhost:5000/littleshop:latest
    container_name: littleshop-admin
    restart: unless-stopped
    ports:
      - "127.0.0.1:5100:8080"  # Local only, BunkerWeb will proxy
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
      - ASPNETCORE_HTTP_PORTS=8080
      - ConnectionStrings__DefaultConnection=Data Source=/app/data/littleshop-production.db

      # JWT Configuration - Production Secret
      - Jwt__Key=ff34ur340uifoisdjf03uur283hr238n9978sdfgb82rn8dh_LittleShop2025
      - Jwt__Issuer=LittleShop-Production
      - Jwt__Audience=LittleShop-Production
      - Jwt__ExpiryInHours=24

      # SilverPay Configuration (pay.thebankofdebbie.giize.com)
      - SilverPay__BaseUrl=http://silverpay-api:8000  # Internal Docker network - correct port
      - SilverPay__PublicUrl=https://pay.thebankofdebbie.giize.com
      - SilverPay__ApiKey=7703aa7a62fa4b40a87e9cfd867f5407147515c0986116ea54fc00c0a0bc30d8
      - SilverPay__WebhookSecret=Thefa1r1esd1d1twebhooks2024
      - SilverPay__DefaultWebhookUrl=https://admin.thebankofdebbie.giize.com/api/orders/payments/webhook
      - SilverPay__AllowUnsignedWebhooks=false

      # Admin Credentials (for initial setup)
      - AdminUser__Username=admin
      - AdminUser__Password=Thefa1r1esd1d1t

      # Royal Mail Settings (if needed)
      - RoyalMail__ClientId=
      - RoyalMail__ClientSecret=

      # WebPush Notifications
      - WebPush__VapidPublicKey=BMc6fFJZ8oIQKQzcl3kMnP9tTsjrm3oI_VxLt3lAGYUMWGInzDKn7jqclEoZzjvXy1QXGFb3dIun8mVBwh-QuS4
      - WebPush__VapidPrivateKey=dYuuagbz2CzCnPDFUpO_qkGLBgnN3MEFZQnjXNkc1MY
      - WebPush__Subject=mailto:admin@thebankofdebbie.giize.com

    volumes:
      - /opt/littleshop/data:/app/data
      - /opt/littleshop/uploads:/app/wwwroot/uploads
      - /opt/littleshop/logs:/app/logs
    networks:
      - littleshop-network  # Shared network for container communication
      - bridge  # Keep bridge for BunkerWeb access
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/api/catalog/products"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"
    labels:
      # BunkerWeb labels for reverse proxy
      - "bunkerweb.AUTOCONF=yes"
      - "bunkerweb.SERVER_NAME=admin.thebankofdebbie.giize.com"
      - "bunkerweb.USE_REVERSE_PROXY=yes"
      - "bunkerweb.REVERSE_PROXY_URL=/"
      - "bunkerweb.REVERSE_PROXY_HOST=http://littleshop-admin:5000"
      - "bunkerweb.AUTO_LETS_ENCRYPT=yes"
      - "bunkerweb.USE_MODSECURITY=yes"

networks:
  littleshop-network:
    external: true
  bridge:
    external: true