services:
  dyndns:
    build: .
    container_name: dyndns-manager
    restart: unless-stopped
    ports:
      - "5080:5000"   # nur lokal – nginx macht den TLS-Termination
    environment:
      - DB_PATH=/data/dyndns.db
      - SECRET_KEY=BITTE_AENDERN_32_ZEICHEN_RANDOM   # openssl rand -hex 32
    volumes:
      - ./data:/data   # SQLite-DB landet in ./data/dyndns.db (Verzeichnis-Mount!)