version: '3.8'

services:
  stegocrypt:
    build: .
    container_name: stegocrypt
    ports:
      - "5000:5000"
    environment:
      - FLASK_ENV=production
    # Uncomment to persist uploads between restarts:
    # volumes:
    #   - ./uploads:/tmp/stego_uploads
    restart: unless-stopped
    deploy:
      resources:
        limits:
          memory: 512M  # Argon2 needs 256MB per operation
        reservations:
          memory: 256M

  # Optional: Add nginx reverse proxy for production
  # nginx:
  #   image: nginx:alpine
  #   ports:
  #     - "80:80"
  #     - "443:443"
  #   volumes:
  #     - ./nginx.conf:/etc/nginx/nginx.conf:ro
  #     - ./certs:/etc/nginx/certs:ro
  #   depends_on:
  #     - stegocrypt
  #   restart: unless-stopped