From 9f267a5344dabb1c267f930aab9e377942140514 Mon Sep 17 00:00:00 2001
From: Daniel Bedeleanu <bede@tfm.ro>
Date: Thu, 23 Apr 2026 12:52:17 +0300
Subject: [PATCH] feat(07-04): update docker-compose.yml to reference config/
 and remove inventory.env

---
 docker-compose.yml | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 12dd6694..6eaaa6fb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,15 +10,18 @@ services:
       - inventory_net
     ports:
       - ${BACKEND_PORT:-8000}:8000
-    env_file:
-      - inventory.env
+    # [D-04] inventory.env deprecated — see config/ folder instead
+    # env_file:
+    #   - inventory.env
     volumes:
+      # [D-07] New config/ structure — YAML config mounted read-only
       # Named volumes for data persistence
       - backend_data:/app/data
       - backend_logs:/app/logs
       - ./config:/app/config:ro
       - ./scripts:/app/scripts:ro
     environment:
+      # [D-06] Environment variables override config/backend.yaml load order
       - DATA_DIR=/app/data
       - LOGS_DIR=/app/logs
       # [C-01] JWT secret key — GENERATE A SECURE VALUE FOR PRODUCTION!
@@ -47,10 +50,13 @@ services:
       - inventory_net
     ports:
       - ${FRONTEND_PORT:-3000}:3000
-    env_file:
-      - inventory.env
+    # [D-04] inventory.env deprecated — see config/ folder instead
+    # env_file:
+    #   - inventory.env
     volumes:
       - frontend_logs:/app/logs
+      # [D-07] New config/ structure — YAML config mounted read-only
+      - ./config:/app/config:ro
     # Write Next.js logs to both stdout (docker logs) and file (mapped volume)
     command: sh -c "mkdir -p /app/logs && node server.js 2>&1 | tee -a /app/logs/frontend.log"
     healthcheck:
@@ -82,10 +88,13 @@ services:
     ports:
       - ${BACKEND_SSL_PORT:-8918}:444
       - ${FRONTEND_SSL_PORT:-8919}:443
-    env_file:
-      - inventory.env
+    # [D-04] inventory.env deprecated — see config/ folder instead
+    # env_file:
+    #   - inventory.env
     volumes:
       - ./config/Caddyfile:/etc/caddy/Caddyfile:ro
+      # [D-07] New config/ structure — YAML config mounted read-only
+      - ./config:/app/config:ro
       # Persist the internal Caddy certificates so users don't get new certificate warnings constantly
       - caddy_data:/data
       - caddy_config:/config