services:
  roborock-server:
    image: ghcr.io/python-roborock/local_roborock_server:latest
    container_name: roborock_local_server
    restart: unless-stopped
    
    ports:
      - "${HOST_HTTPS_PORT:-8555}:555"
      - "${HOST_MQTT_PORT:-8885}:8881"
      
    volumes:
      - ${DOCKER_DATA_PATH:-./data}:/data
      
    environment:
      # Interne Ports für unverschlüsselten Traffic
      - ROBOROCK_SERVER_HTTPS_PORT=555
      - ROBOROCK_SERVER_MQTT_TLS_PORT=8881
      
      - ROBOROCK_STACK_FQDN=${STACK_FQDN}
      - ROBOROCK_ADVERTISED_HTTPS_PORT=${EXTERNAL_HTTPS_PORT:-443}
      - ROBOROCK_ADVERTISED_MQTT_PORT=${EXTERNAL_MQTT_PORT:-8883}
      
      # TLS wird komplett von HAProxy übernommen
      - ROBOROCK_TLS_MODE=none