services:
  backend:
    environment:
      SECURE_COOKIES: "true"

  frontend:
    environment:
      NGINX_ENVSUBST_TEMPLATE_DIR: /etc/nginx/templates-tls
      PUBLIC_TLS_PORT: ${TLS_PORT:-5443}
      TLS_BOOTSTRAP: "true"
    ports:
      - "${BIND_HOST:-127.0.0.1}:${TLS_PORT:-5443}:5443"
    volumes:
      - type: bind
        source: ${TLS_CERT_DIR:-./.local/tls}
        target: /etc/nginx/tls