# Pre-Production: combine with compose.yml. Reuse the existing read-only mount.
# Run the documented credential preflight before starting the web service.
services:
  web:
    extends:
      file: compose.push.yml
      service: web
    environment:
      DATABASE_URL: postgresql://${POSTGRES_USER:?required variable POSTGRES_USER is missing}:${POSTGRES_PASSWORD:?required variable POSTGRES_PASSWORD is missing}@db:5432/${POSTGRES_DB:?required variable POSTGRES_DB is missing}
      INITIAL_ADMIN_USERNAME: ${INITIAL_ADMIN_USERNAME:?required variable INITIAL_ADMIN_USERNAME is missing}
      INITIAL_ADMIN_PASSWORD: ${INITIAL_ADMIN_PASSWORD:?required variable INITIAL_ADMIN_PASSWORD is missing}
      INITIAL_ADMIN_EMAIL: ${INITIAL_ADMIN_EMAIL:?required variable INITIAL_ADMIN_EMAIL is missing}
      GITEA_URL: ${GITEA_URL:?required variable GITEA_URL is missing}
      GITEA_TOKEN: ${GITEA_TOKEN:?required variable GITEA_TOKEN is missing}
      GITEA_OWNER: ${GITEA_OWNER:?required variable GITEA_OWNER is missing}
      GITEA_REPO: ${GITEA_REPO:?required variable GITEA_REPO is missing}
      PUSH_ENABLED: "true"
      FIREBASE_PROJECT_ID: ${FIREBASE_PROJECT_ID:?Set the Pre-Production Firebase project ID}
      COOKIE_SECURE: "true"