services:
  boundless:
    build: .
    image: boundless:latest
    restart: unless-stopped
    environment:
      # 必填：登录口令
      BOUNDLESS_PASSWORD: ${BOUNDLESS_PASSWORD:?请在 .env 或环境变量中设置 BOUNDLESS_PASSWORD}
    volumes:
      - ./data:/data
    # 只监听本机，由前面的 HTTPS 反向代理（Caddy / Nginx）转发
    ports:
      - '127.0.0.1:3000:3000'