version: "3.9"

services:
  shard-test:
    build: .
    container_name: greencoast-shard-test
    restart: unless-stopped
    user: "0:0"
    # You can keep these published for local debugging; Tunnel doesn't require them.
    ports:
      - "9080:9080"   # API
      - "9082:9082"   # Frontend
    environment:
      - GC_DEV_ALLOW_UNAUTH=false
    volumes:
      - ./testdata:/var/lib/greencoast
      - ./configs/shard.test.yaml:/app/shard.yaml:ro
      - ./client:/app/client:ro

  cloudflared:
    image: cloudflare/cloudflared:latest
    # Use the token you copy from Cloudflare Zero Trust → Tunnels
    command: tunnel --no-autoupdate run --token ${CF_TUNNEL_TOKEN}
    restart: unless-stopped
    depends_on:
      - shard-test