# Standalone production deployment (fresh host, no portal infra).
# The host is VPN-only, so the app port is the access boundary — there is
# no separate login. Bind only to the interface reachable over your VPN.
#
#   docker compose -f docker-compose.prod.yml up -d --build
#
# Configure secrets/endpoint in .env (see .env.prod.example).
services:
  offer-to-order:
    build: .
    container_name: offer-to-order
    restart: unless-stopped
    ports:
      # Host port 8080 → container 8000. Reachable over the VPN at
      # http://<prod-host>:8080/. Change the left side if 8080 is taken.
      - "8080:8000"
    environment:
      LITELLM_BASE_URL: ${LITELLM_BASE_URL:-https://litellm.klas.chat/v1}
      LITELLM_API_KEY:  ${LITELLM_API_KEY:?set LITELLM_API_KEY in .env}
      LLM_MODEL:        ${LLM_MODEL:-anthropic/claude-sonnet-4-20250514}