docker-compose.yml

services:
  app:
    build: .
    ports:
      - "5000:3001"
    volumes:
      # AWS credentials — remove if using env vars instead
      - ~/.aws:/root/.aws:ro
    environment:
      NODE_ENV: production
      # REQUIRED in production: long random bearer token gating /api/*.
      # Override via `API_TOKEN=... docker compose up` or set in the shell.
      # The app refuses to start in production if this is missing.
      API_TOKEN: ${API_TOKEN:?set API_TOKEN in your shell before running docker compose}
      # Uncomment and set these instead of mounting ~/.aws if you prefer:
      # AWS_ACCESS_KEY_ID: ""
      # AWS_SECRET_ACCESS_KEY: ""
      # AWS_DEFAULT_REGION: "us-east-1"
      #
      # Note: with the serverless Discord bot, the bot token is stored in AWS
      # Secrets Manager (managed via the web UI), not as a container env var.
      # The DISCORD_BOT_TOKEN env var was removed during that migration.