services:
  telegram-relay:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: ghabilee-telegram-relay
    restart: unless-stopped
    env_file:
      - .env
    ports:
      # Only localhost — Nginx terminates TLS in front.
      - '127.0.0.1:3100:3100'
    healthcheck:
      test:
        [
          'CMD',
          'node',
          '-e',
          "fetch('http://127.0.0.1:3100/health').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
        ]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s