# node-red — flow-based automation runtime + editor
# Networks: app
# UI: internal port 1880 → reverse-proxied through nginx-proxy

services:
  node-red:
    image: nodered/node-red:4.1
    restart: unless-stopped
    networks: [app]
    volumes:
      - node-red-data:/data
    environment:
      TZ: ${TZ:-Europe/Amsterdam}
    # TODO: Keycloak OIDC adapter; preinstalled modules; CONTRIB allow-list

networks:
  app:

volumes:
  node-red-data: