From 848c8c7ee83e2cea75765a1df5bd33973cea31eb Mon Sep 17 00:00:00 2001
From: Hank <hank@jointsecurityarea.org>
Date: Mon, 13 Jul 2026 03:53:44 +0000
Subject: [PATCH] compose: read env from backend/.env (single source of truth)

Was ./.env, which required a manual copy from backend/.env and could go stale
(e.g. a changed PORTAL_PASSWORD not taking effect). Point env_file straight at
backend/.env so there's one file to edit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 docker-compose.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 20e1aa0..3668405 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -3,7 +3,9 @@ services:
     build: .
     image: camptickets:latest
     container_name: camptickets
-    env_file: .env
+    # Single source of truth for secrets — edit backend/.env, then
+    # `docker compose up -d`. (Was ./.env; consolidated to avoid a stale copy.)
+    env_file: backend/.env
     environment:
       # Container always listens on 8080 internally; the host mapping below is
       # what nginx proxies to. Keep this fixed regardless of .env PORT.