services: app: build: context: . dockerfile: docker/Dockerfile ports: - "3001:80" # nginx / app (public) - "8091:8090" # PocketBase admin UI (loopback only — SSH tunnel) volumes: - "./pb_data:/app/pb_data" # PB DB persistence environment: PB_EMAIL: debug@famchamp.dev PB_PASSWORD: debug123 restart: unless-stopped