services:
  accmanager:
    image: ${DOCKER_IMAGE:-yourdockerhub/accmanager:latest}
    container_name: accmanager
    restart: unless-stopped
    ports:
      - "${APP_PORT:-3000}:3000"
    environment:
      NODE_ENV: ${NODE_ENV:-production}
      PORT: 3000
      TZ: ${TZ:-Asia/Ho_Chi_Minh}
      APP_TIME_ZONE: ${APP_TIME_ZONE:-Asia/Ho_Chi_Minh}
      DB_SERVER: ${DB_SERVER:?DB_SERVER is required}
      DB_USER: ${DB_USER:?DB_USER is required}
      DB_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD is required}
      DB_NAME: ${DB_NAME:-AccManager}
      DB_ENCRYPT: ${DB_ENCRYPT:-false}
      DB_TRUST_CERTIFICATE: ${DB_TRUST_CERTIFICATE:-true}
      DB_CONNECT_TIMEOUT: ${DB_CONNECT_TIMEOUT:-30000}
      BCRYPT_ROUNDS: ${BCRYPT_ROUNDS:-12}
      DATA_ENCRYPTION_SECRET: ${DATA_ENCRYPTION_SECRET:?DATA_ENCRYPTION_SECRET is required}
      APP_BASE_URL: ${APP_BASE_URL:?APP_BASE_URL is required}
      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS:-}
      COOKIE_SECURE: ${COOKIE_SECURE:-true}
      SESSION_TTL_HOURS: ${SESSION_TTL_HOURS:-12}
      REMEMBER_SESSION_TTL_DAYS: ${REMEMBER_SESSION_TTL_DAYS:-14}
      ALLOW_SELF_REGISTRATION: ${ALLOW_SELF_REGISTRATION:-true}
      TRUST_PROXY_HOPS: ${TRUST_PROXY_HOPS:-1}
      INITIAL_ADMIN_USERNAME: ${INITIAL_ADMIN_USERNAME:-admin}
      INITIAL_ADMIN_PASSWORD: ${INITIAL_ADMIN_PASSWORD:-}
      INITIAL_ADMIN_EMAIL: ${INITIAL_ADMIN_EMAIL:-admin@accmanager.local}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_SECURE: ${SMTP_SECURE:-false}
      SMTP_REQUIRE_TLS: ${SMTP_REQUIRE_TLS:-true}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASS: ${SMTP_PASS:-}
      SMTP_FROM: ${SMTP_FROM:-}
      EMAIL_VERIFY_TOKEN_TTL_MINUTES: ${EMAIL_VERIFY_TOKEN_TTL_MINUTES:-30}
      PASSWORD_RESET_TOKEN_TTL_MINUTES: ${PASSWORD_RESET_TOKEN_TTL_MINUTES:-30}