services:
  microsoft-rewards-bot:
    build: .
    container_name: microsoft-rewards-bot
    restart: unless-stopped

    # Volume mounts: Specify a location where you want to save the files on your local machine.
    volumes:
      - ./src/accounts.jsonc:/app/src/accounts.jsonc:ro
      - ./src/config.jsonc:/app/src/config.jsonc:ro
      - ./sessions:/app/sessions

    environment:
      TZ: "America/Toronto" # Set your timezone for logging (and cron if enabled)
      NODE_ENV: "production"
      # Force headless when running in Docker (uses Chromium Headless Shell only)
      FORCE_HEADLESS: "1"
      
      # Optional: enable in-container cron scheduling
      #USE_CRON: "true"
      #CRON_SCHEDULE: "0 9 * * *"  # Daily at 9 AM (see https://crontab.guru)
      #RUN_ON_START: "true"         # Run once immediately on container start

    # Security hardening
    security_opt:
      - no-new-privileges:true

    # Default: single run per container start
    command: ["node", "--enable-source-maps", "./dist/index.js"]