docker-compose.production.yml

services:
  webxr:
    container_name: logseq-spring-thing-webxr
    build:
      context: .
      dockerfile: Dockerfile.production
      args:
        CUDA_ARCH: ${CUDA_ARCH:-89}
        REBUILD_PTX: ${REBUILD_PTX:-false}
    env_file:
      - .env # Load all variables from .env file into the container
    environment:
      - NVIDIA_VISIBLE_DEVICES=${NVIDIA_VISIBLE_DEVICES:-0}
      - NVIDIA_GPU_UUID=${NVIDIA_GPU_UUID:-0}
      # RUST_LOG is now inherited from the .env file via env_file directive
      - NODE_ENV=production
      - GIT_HASH=${GIT_HASH:-production}
    volumes:
      # Only mount data directories, not code
      - ./data/markdown:/app/data/markdown
      - ./data/metadata:/app/data/metadata
      - ./data/user_settings:/app/user_settings
      - ./data/settings.yaml:/app/settings.yaml
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              capabilities: [compute,utility]
              device_ids: ['0']
    ports:
      - "4000:4000"  # Expose API port
    networks:
      - docker_ragflow # Revert to simple network list item
    restart: unless-stopped
    healthcheck:
      # Check root path which Nginx serves, indicating Nginx is up
      test: ["CMD", "curl", "-f", "http://localhost:4000/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  cloudflared:
    container_name: cloudflared-tunnel
    image: cloudflare/cloudflared:latest
    command: tunnel --no-autoupdate run
    environment:
      # Use the standard variable name, expecting it from the .env file loaded by Compose
      - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
    volumes:
      - ./config.yml:/etc/cloudflared/config.yml:ro
    depends_on:
      - webxr
    networks:
      - docker_ragflow
    restart: unless-stopped

networks:
  docker_ragflow:
    external: true

# Removed duplicated cloudflared service definition