services:
  app:
    image: demo-app:latest
    container_name: demo-app
    restart: unless-stopped

  nginx:
    image: nginx:alpine  # Switch to plain Nginx (no Certbot)
    container_name: demo-nginx
    restart: unless-stopped
    ports:
      - 8008:80
      - 4433:443
    volumes:
      - ./nginx_user_conf.d:/etc/nginx/conf.d/
      - /home/devroot/demo/certs/fullchain.pem:/etc/nginx/ssl/fullchain.pem:ro  # Mount cert
      - /home/devroot/demo/certs/prvkey.pem:/etc/nginx/ssl/privkey.pem:ro  # Mount key
    depends_on:
      - app