docker-compose.yml

services:
  app:
    build: .
    ports:
      - "8000:8000"
    env_file: .env
    volumes:
      - strava-data:/app/.strava
      - strava-workdir:/app/zone2_workdir
    restart: unless-stopped
    # Cap so a coverage-matching spike gets this container OOM-killed (and
    # restarted) instead of thrashing the whole Pi host.
    mem_limit: 2g
    mem_reservation: 512m

  cloudflared:
    image: cloudflare/cloudflared:latest
    command: tunnel run
    environment:
      - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
    depends_on:
      - app
    restart: unless-stopped

# Names pinned explicitly: Compose otherwise prefixes them with the project
# name, which it derives from the directory. Renaming the checkout would then
# point at fresh empty volumes and orphan the cached activities and token.
volumes:
  strava-data:
    name: strava-intelligence_strava-data
  strava-workdir:
    name: strava-intelligence_strava-workdir