fastapi-fullstack 0.1.7__py3-none-any.whl → 0.1.15__py3-none-any.whl

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/services/conversation.py

@@ -4,7 +4,7 @@
 Contains business logic for conversation, message, and tool call operations.
 """
 
-from datetime import datetime
+from datetime import UTC, datetime
 from uuid import UUID
 
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -264,7 +264,7 @@ class ConversationService:
             tool_call_id=data.tool_call_id,
             tool_name=data.tool_name,
             args=data.args,
-            started_at=data.started_at or datetime.utcnow(),
+            started_at=data.started_at or datetime.now(UTC),
         )
 
     async def complete_tool_call(
@@ -282,7 +282,7 @@ class ConversationService:
             self.db,
             db_tool_call=tool_call,
             result=data.result,
-            completed_at=data.completed_at or datetime.utcnow(),
+            completed_at=data.completed_at or datetime.now(UTC),
             success=data.success,
         )
 
@@ -293,7 +293,7 @@ class ConversationService:
 Contains business logic for conversation, message, and tool call operations.
 """
 
-from datetime import datetime
+from datetime import UTC, datetime
 
 from sqlalchemy.orm import Session
 
@@ -550,7 +550,7 @@ class ConversationService:
             tool_call_id=data.tool_call_id,
             tool_name=data.tool_name,
             args=data.args,
-            started_at=data.started_at or datetime.utcnow(),
+            started_at=data.started_at or datetime.now(UTC),
         )
 
     def complete_tool_call(
@@ -568,7 +568,7 @@ class ConversationService:
             self.db,
             db_tool_call=tool_call,
             result=data.result,
-            completed_at=data.completed_at or datetime.utcnow(),
+            completed_at=data.completed_at or datetime.now(UTC),
             success=data.success,
         )
 
@@ -579,7 +579,7 @@ class ConversationService:
 Contains business logic for conversation, message, and tool call operations.
 """
 
-from datetime import datetime
+from datetime import UTC, datetime
 
 from app.core.exceptions import NotFoundError
 from app.db.models.conversation import Conversation, Message, ToolCall
@@ -823,7 +823,7 @@ class ConversationService:
             tool_call_id=data.tool_call_id,
             tool_name=data.tool_name,
             args=data.args,
-            started_at=data.started_at or datetime.utcnow(),
+            started_at=data.started_at or datetime.now(UTC),
         )
 
     async def complete_tool_call(
@@ -840,7 +840,7 @@ class ConversationService:
         return await conversation_repo.complete_tool_call(
             db_tool_call=tool_call,
             result=data.result,
-            completed_at=data.completed_at or datetime.utcnow(),
+            completed_at=data.completed_at or datetime.now(UTC),
             success=data.success,
         )
 

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/services/session.py

@@ -3,7 +3,7 @@
 """Session service (PostgreSQL async)."""
 
 import hashlib
-from datetime import datetime, timedelta
+from datetime import UTC, datetime, timedelta
 from uuid import UUID
 
 from sqlalchemy.ext.asyncio import AsyncSession
@@ -64,7 +64,7 @@ class SessionService:
     ) -> Session:
         """Create a new session for a user."""
         device_name, device_type = _parse_user_agent(user_agent)
-        expires_at = datetime.utcnow() + timedelta(minutes=settings.REFRESH_TOKEN_EXPIRE_MINUTES)
+        expires_at = datetime.now(UTC) + timedelta(minutes=settings.REFRESH_TOKEN_EXPIRE_MINUTES)
 
         return await session_repo.create(
             self.db,
@@ -86,7 +86,7 @@ class SessionService:
         token_hash = _hash_token(refresh_token)
         session = await session_repo.get_by_refresh_token_hash(self.db, token_hash)
 
-        if session and session.expires_at > datetime.utcnow():
+        if session and session.expires_at > datetime.now(UTC):
             await session_repo.update_last_used(self.db, session.id)
             return session
 
@@ -115,7 +115,7 @@ class SessionService:
 """Session service (SQLite sync)."""
 
 import hashlib
-from datetime import datetime, timedelta
+from datetime import UTC, datetime, timedelta
 
 from sqlalchemy.orm import Session as DBSession
 
@@ -175,7 +175,7 @@ class SessionService:
     ) -> Session:
         """Create a new session for a user."""
         device_name, device_type = _parse_user_agent(user_agent)
-        expires_at = datetime.utcnow() + timedelta(minutes=settings.REFRESH_TOKEN_EXPIRE_MINUTES)
+        expires_at = datetime.now(UTC) + timedelta(minutes=settings.REFRESH_TOKEN_EXPIRE_MINUTES)
 
         return session_repo.create(
             self.db,
@@ -197,7 +197,7 @@ class SessionService:
         token_hash = _hash_token(refresh_token)
         session = session_repo.get_by_refresh_token_hash(self.db, token_hash)
 
-        if session and session.expires_at > datetime.utcnow():
+        if session and session.expires_at > datetime.now(UTC):
             session_repo.update_last_used(self.db, session.id)
             return session
 

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/services/webhook.py

@@ -6,7 +6,7 @@ import hashlib
 import hmac
 import json
 import secrets
-from datetime import datetime
+from datetime import UTC, datetime
 from uuid import UUID
 
 import httpx
@@ -89,7 +89,7 @@ class WebhookService:
 
         test_payload = {
             "event": "webhook.test",
-            "timestamp": datetime.utcnow().isoformat(),
+            "timestamp": datetime.now(UTC).isoformat(),
             "data": {"message": "This is a test webhook delivery"},
         }
 
@@ -106,7 +106,7 @@ class WebhookService:
 
         payload = {
             "event": event_type,
-            "timestamp": datetime.utcnow().isoformat(),
+            "timestamp": datetime.now(UTC).isoformat(),
             "data": data,
         }
 
@@ -159,7 +159,7 @@ class WebhookService:
             delivery.response_status = response.status_code
             delivery.response_body = response.text[:10000]  # Limit size
             delivery.success = 200 <= response.status_code < 300
-            delivery.delivered_at = datetime.utcnow()
+            delivery.delivered_at = datetime.now(UTC)
 
             logfire.info(
                 "Webhook delivered",
@@ -228,7 +228,7 @@ import hashlib
 import hmac
 import json
 import secrets
-from datetime import datetime
+from datetime import UTC, datetime
 
 import httpx
 import logfire
@@ -306,7 +306,7 @@ class WebhookService:
 
         payload = {
             "event": event_type,
-            "timestamp": datetime.utcnow().isoformat(),
+            "timestamp": datetime.now(UTC).isoformat(),
             "data": data,
         }
 
@@ -356,7 +356,7 @@ class WebhookService:
             delivery.response_status = response.status_code
             delivery.response_body = response.text[:10000]
             delivery.success = 200 <= response.status_code < 300
-            delivery.delivered_at = datetime.utcnow()
+            delivery.delivered_at = datetime.now(UTC)
 
         except Exception as e:
             delivery.error_message = str(e)

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/worker/__init__.py

@@ -1,4 +1,4 @@
-{%- if cookiecutter.use_celery or cookiecutter.use_taskiq %}
+{%- if cookiecutter.use_celery or cookiecutter.use_taskiq or cookiecutter.use_arq %}
 """Background workers."""
 {%- else %}
 # Background workers not enabled

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/worker/arq_app.py

@@ -0,0 +1,165 @@
+{%- if cookiecutter.use_arq %}
+"""ARQ (Async Redis Queue) application configuration."""
+
+import asyncio
+import logging
+from typing import Any
+
+from arq import cron
+from arq.connections import RedisSettings
+
+from app.core.config import settings
+
+logger = logging.getLogger(__name__)
+
+
+async def startup(ctx: dict[str, Any]) -> None:
+    """Initialize resources on worker startup."""
+    logger.info("ARQ worker starting up...")
+    # Add any startup initialization here
+    # e.g., database connections, external clients
+
+
+async def shutdown(ctx: dict[str, Any]) -> None:
+    """Cleanup resources on worker shutdown."""
+    logger.info("ARQ worker shutting down...")
+    # Add any cleanup here
+
+
+# === Example Tasks ===
+# Tasks are defined as regular async functions
+
+
+async def example_task(ctx: dict[str, Any], message: str) -> dict[str, Any]:
+    """
+    Example task that processes a message.
+
+    Args:
+        ctx: ARQ context dictionary (contains redis connection, job info, etc.)
+        message: Message to process
+
+    Returns:
+        Result dictionary with processed message
+    """
+    logger.info(f"Processing message: {message}")
+
+    # Simulate async work
+    await asyncio.sleep(1)
+
+    result = {
+        "status": "completed",
+        "message": f"Processed: {message}",
+        "job_id": ctx.get("job_id"),
+    }
+    logger.info(f"Task completed: {result}")
+    return result
+
+
+async def long_running_task(ctx: dict[str, Any], duration: int = 10) -> dict[str, Any]:
+    """
+    Example long-running async task.
+
+    Args:
+        ctx: ARQ context dictionary
+        duration: Duration in seconds
+
+    Returns:
+        Result dictionary
+    """
+    logger.info(f"Starting long-running task for {duration} seconds")
+
+    for i in range(duration):
+        await asyncio.sleep(1)
+        logger.info(f"Progress: {i + 1}/{duration}")
+
+    return {
+        "status": "completed",
+        "duration": duration,
+        "job_id": ctx.get("job_id"),
+    }
+
+
+async def send_email_task(
+    ctx: dict[str, Any], to: str, subject: str, body: str
+) -> dict[str, Any]:
+    """
+    Example email sending task.
+
+    Replace with actual email sending logic (e.g., using aiosmtplib, sendgrid, etc.)
+
+    Args:
+        ctx: ARQ context dictionary
+        to: Recipient email
+        subject: Email subject
+        body: Email body
+
+    Returns:
+        Result dictionary
+    """
+    logger.info(f"Sending email to {to}: {subject}")
+
+    # TODO: Implement actual email sending
+    # Example with aiosmtplib:
+    # import aiosmtplib
+    # ...
+
+    # Simulate sending
+    await asyncio.sleep(0.5)
+
+    return {
+        "status": "sent",
+        "to": to,
+        "subject": subject,
+    }
+
+
+# === Scheduled Task (runs periodically) ===
+
+
+async def scheduled_example(ctx: dict[str, Any]) -> dict[str, Any]:
+    """Example scheduled task that runs every minute."""
+    logger.info("Running scheduled example task")
+    return await example_task(ctx, "scheduled")
+
+
+# === Worker Settings ===
+# This class is used by the ARQ CLI: arq app.worker.arq_app.WorkerSettings
+
+
+class WorkerSettings:
+    """ARQ Worker configuration."""
+
+    # Redis connection settings
+    redis_settings = RedisSettings(
+        host=settings.ARQ_REDIS_HOST,
+        port=settings.ARQ_REDIS_PORT,
+        password=settings.ARQ_REDIS_PASSWORD or None,
+        database=settings.ARQ_REDIS_DB,
+    )
+
+    # Register task functions
+    functions = [
+        example_task,
+        long_running_task,
+        send_email_task,
+    ]
+
+    # Scheduled/cron jobs
+    cron_jobs = [
+        cron(scheduled_example, minute={0, 15, 30, 45}),  # Every 15 minutes
+        # cron(scheduled_example, minute=0, hour=0),  # Daily at midnight
+    ]
+
+    # Worker lifecycle hooks
+    on_startup = startup
+    on_shutdown = shutdown
+
+    # Worker settings
+    max_jobs = 10  # Maximum concurrent jobs
+    job_timeout = 300  # Job timeout in seconds (5 minutes)
+    keep_result = 3600  # Keep results for 1 hour
+    poll_delay = 0.5  # Polling delay in seconds
+    queue_read_limit = 100  # Number of jobs to read at once
+{%- else %}
+# ARQ not enabled for this project
+{%- endif %}

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/app/worker/tasks/__init__.py

@@ -1,4 +1,4 @@
-{%- if cookiecutter.use_celery or cookiecutter.use_taskiq %}
+{%- if cookiecutter.use_celery or cookiecutter.use_taskiq or cookiecutter.use_arq %}
 """Background tasks."""
 
 {%- if cookiecutter.use_celery %}
@@ -10,6 +10,11 @@ from app.worker.tasks.taskiq_examples import example_task as taskiq_example_task
 from app.worker.tasks.taskiq_examples import long_running_task as taskiq_long_running_task
 {%- endif %}
 
+{%- if cookiecutter.use_arq %}
+from app.worker.arq_app import example_task as arq_example_task
+from app.worker.arq_app import long_running_task as arq_long_running_task
+{%- endif %}
+
 __all__ = [
 {%- if cookiecutter.use_celery %}
     "example_task",
@@ -19,6 +24,10 @@ __all__ = [
     "taskiq_example_task",
     "taskiq_long_running_task",
 {%- endif %}
+{%- if cookiecutter.use_arq %}
+    "arq_example_task",
+    "arq_long_running_task",
+{%- endif %}
 ]
 {%- else %}
 # Background tasks not enabled

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/pyproject.toml

@@ -31,7 +31,11 @@ dependencies = [
     "logfire[{{ logfire_extras | join(',') }}]>=2.0.0",
 {%- endif %}
 {%- if cookiecutter.use_postgresql %}
+{%- if cookiecutter.use_sqlmodel %}
+    "sqlmodel>=0.0.22",
+{%- else %}
     "sqlalchemy[asyncio]>=2.0.0",
+{%- endif %}
     "asyncpg>=0.30.0",
     "psycopg2-binary>=2.9.0",
     "alembic>=1.14.0",
@@ -42,7 +46,11 @@ dependencies = [
     "beanie>=1.27.0",
 {%- endif %}
 {%- if cookiecutter.use_sqlite %}
+{%- if cookiecutter.use_sqlmodel %}
+    "sqlmodel>=0.0.22",
+{%- else %}
     "sqlalchemy>=2.0.0",
+{%- endif %}
     "alembic>=1.14.0",
 {%- endif %}
 {%- if cookiecutter.use_jwt %}
@@ -69,6 +77,9 @@ dependencies = [
 {%- if cookiecutter.enable_sentry %}
     "sentry-sdk[fastapi]>=2.18.0",
 {%- endif %}
+{%- if cookiecutter.enable_prometheus %}
+    "prometheus-fastapi-instrumentator>=7.0.0",
+{%- endif %}
 {%- if cookiecutter.enable_admin_panel %}
     "sqladmin>=0.19.0",
 {%- if cookiecutter.admin_require_auth %}
@@ -111,6 +122,35 @@ dependencies = [
 {%- endif %}
     "langgraph>=0.2.0",
 {%- endif %}
+{%- if cookiecutter.enable_ai_agent and cookiecutter.use_langgraph %}
+    "langchain-core>=0.3.0",
+{%- if cookiecutter.use_openai %}
+    "langchain-openai>=0.3.0",
+{%- endif %}
+{%- if cookiecutter.use_anthropic %}
+    "langchain-anthropic>=0.3.0",
+{%- endif %}
+    "langgraph>=0.2.0",
+    "langgraph-checkpoint>=2.0.0",
+{%- endif %}
+{%- if cookiecutter.enable_ai_agent and cookiecutter.use_crewai %}
+    "crewai>=1.0.0",
+{%- if cookiecutter.use_openai %}
+    "langchain-openai>=0.3.0",
+{%- endif %}
+{%- if cookiecutter.use_anthropic %}
+    "langchain-anthropic>=0.3.0",
+{%- endif %}
+{%- endif %}
+{%- if cookiecutter.enable_ai_agent and cookiecutter.use_deepagents %}
+    "deepagents>=0.1.0",
+{%- if cookiecutter.use_openai %}
+    "langchain-openai>=0.3.0",
+{%- endif %}
+{%- if cookiecutter.use_anthropic %}
+    "langchain-anthropic>=0.3.0",
+{%- endif %}
+{%- endif %}
 {%- if cookiecutter.logfire_httpx or cookiecutter.enable_file_storage %}
     "httpx>=0.27.0",
 {%- endif %}

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/tests/api/test_metrics.py

@@ -0,0 +1,53 @@
+{%- if cookiecutter.enable_prometheus %}
+"""Prometheus metrics endpoint tests."""
+
+import pytest
+from httpx import AsyncClient
+
+from app.core.config import settings
+
+
+@pytest.mark.anyio
+async def test_metrics_endpoint(client: AsyncClient):
+    """Test that /metrics endpoint returns Prometheus metrics."""
+    response = await client.get(settings.PROMETHEUS_METRICS_PATH)
+    assert response.status_code == 200
+    assert response.headers["content-type"].startswith("text/plain")
+
+    # Check for standard prometheus-fastapi-instrumentator metrics
+    content = response.text
+    assert "http_requests_total" in content
+    assert "http_request_duration_seconds" in content
+
+
+@pytest.mark.anyio
+async def test_metrics_increments_on_request(client: AsyncClient):
+    """Test that metrics are incremented after making requests."""
+    # Make a health check request first
+    await client.get(f"{settings.API_V1_STR}/health")
+
+    # Then check metrics
+    response = await client.get(settings.PROMETHEUS_METRICS_PATH)
+    assert response.status_code == 200
+
+    content = response.text
+    # Should have recorded the health check request
+    assert "http_requests_total" in content
+
+
+@pytest.mark.anyio
+async def test_metrics_excluded_from_own_metrics(client: AsyncClient):
+    """Test that /metrics endpoint doesn't count itself in metrics."""
+    # Make multiple requests to /metrics
+    for _ in range(3):
+        await client.get(settings.PROMETHEUS_METRICS_PATH)
+
+    response = await client.get(settings.PROMETHEUS_METRICS_PATH)
+    content = response.text
+
+    # The /metrics endpoint should be excluded from instrumentation
+    # so we shouldn't see it in the metrics path labels
+    assert f'path="{settings.PROMETHEUS_METRICS_PATH}"' not in content
+{%- else %}
+# Prometheus metrics are not enabled for this project
+{%- endif %}

fastapi_gen/template/{{cookiecutter.project_slug}}/backend/tests/test_agents.py

@@ -58,6 +58,7 @@ class TestAssistantAgent:
         assert agent.temperature == 0.5
         assert agent.system_prompt == "Custom prompt"
 
+    @patch.dict("os.environ", {"OPENAI_API_KEY": "test-key"})
     @patch("app.agents.assistant.OpenAIProvider")
     @patch("app.agents.assistant.OpenAIChatModel")
     def test_agent_property_creates_agent(self, mock_model, mock_provider):
@@ -67,6 +68,7 @@ class TestAssistantAgent:
         assert agent._agent is not None
         mock_model.assert_called_once()
 
+    @patch.dict("os.environ", {"OPENAI_API_KEY": "test-key"})
     @patch("app.agents.assistant.OpenAIProvider")
     @patch("app.agents.assistant.OpenAIChatModel")
     def test_agent_property_caches_agent(self, mock_model, mock_provider):

fastapi_gen/template/{{cookiecutter.project_slug}}/docker-compose.dev.yml

@@ -50,6 +50,12 @@ services:
 {%- endif %}
 {%- endif %}
     restart: unless-stopped
+{%- if cookiecutter.enable_prometheus %}
+    labels:
+      - "prometheus.scrape=true"
+      - "prometheus.port={{ cookiecutter.backend_port }}"
+      - "prometheus.path=/metrics"
+{%- endif %}
 
 {%- if cookiecutter.use_postgresql %}
 

fastapi_gen/template/{{cookiecutter.project_slug}}/docker-compose.prod.yml

@@ -4,6 +4,10 @@
 # with Traefik reverse proxy
 {%- elif cookiecutter.include_traefik_labels %}
 # with external Traefik (connect to traefik-public network)
+{%- elif cookiecutter.include_nginx_service %}
+# with Nginx reverse proxy
+{%- elif cookiecutter.include_nginx_config %}
+# with external Nginx (config template provided)
 {%- else %}
 # without reverse proxy (ports exposed directly)
 {%- endif %}
@@ -24,6 +28,19 @@
 #   1. Create external traefik-public network: docker network create traefik-public
 #   2. Run your Traefik instance connected to traefik-public network
 #   3. Configure .env.prod with DOMAIN
+{%- elif cookiecutter.include_nginx_service %}
+#
+# Prerequisites:
+#   1. Place SSL certificates in nginx/ssl/ directory:
+#      - nginx/ssl/cert.pem (certificate)
+#      - nginx/ssl/key.pem (private key)
+#   2. Configure .env.prod with DOMAIN
+#   3. Ensure ports 80 and 443 are available
+{%- elif cookiecutter.include_nginx_config %}
+#
+# Prerequisites:
+#   1. Configure your external Nginx using nginx/nginx.conf as reference
+#   2. Configure .env.prod with DOMAIN
 {%- endif %}
 
 services:
@@ -82,6 +99,36 @@ services:
           memory: 256M
 {%- endif %}
 
+{%- if cookiecutter.include_nginx_service %}
+  nginx:
+    image: nginx:alpine
+    container_name: {{ cookiecutter.project_slug }}_nginx
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx/ssl:/etc/nginx/ssl:ro
+    networks:
+      - backend-internal
+    depends_on:
+      - app
+{%- if cookiecutter.use_frontend %}
+      - frontend
+{%- endif %}
+    healthcheck:
+      test: ["CMD", "nginx", "-t"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 128M
+{%- endif %}
+
   app:
     build:
       context: ./backend
@@ -120,6 +167,10 @@ services:
       - "traefik.http.routers.{{ cookiecutter.project_slug }}-api.middlewares={{ cookiecutter.project_slug }}-security-headers@docker"
       - "traefik.http.services.{{ cookiecutter.project_slug }}-api.loadbalancer.server.port={{ cookiecutter.backend_port }}"
       - "traefik.docker.network=traefik-public"
+{%- elif cookiecutter.include_nginx_service %}
+    networks:
+      - backend-internal
+    # No ports exposed - nginx handles external traffic
 {%- else %}
     networks:
       - backend-internal
@@ -289,6 +340,10 @@ services:
       - "traefik.http.routers.{{ cookiecutter.project_slug }}-flower.tls.certresolver=letsencrypt"
       - "traefik.http.services.{{ cookiecutter.project_slug }}-flower.loadbalancer.server.port=5555"
       - "traefik.docker.network=traefik-public"
+{%- elif cookiecutter.include_nginx_service %}
+    networks:
+      - backend-internal
+    # No ports exposed - nginx handles external traffic
 {%- else %}
     networks:
       - backend-internal
@@ -372,6 +427,45 @@ services:
           memory: 128M
 {%- endif %}
 
+{%- if cookiecutter.use_arq %}
+
+  arq_worker:
+    build:
+      context: ./backend
+      dockerfile: Dockerfile
+    container_name: {{ cookiecutter.project_slug }}_arq_worker
+    command: arq app.worker.arq_app.WorkerSettings
+    env_file:
+      - .env.prod
+      - ./backend/.env
+    environment:
+      - DEBUG=false
+{%- if cookiecutter.use_postgresql %}
+      - POSTGRES_HOST=db
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
+{%- endif %}
+      - REDIS_HOST=redis
+      - REDIS_PASSWORD=${REDIS_PASSWORD}
+      - ARQ_REDIS_HOST=redis
+      - ARQ_REDIS_PORT=6379
+      - ARQ_REDIS_DB=2
+    networks:
+      - backend-internal
+    depends_on:
+      redis:
+        condition: service_healthy
+{%- if cookiecutter.use_postgresql %}
+      db:
+        condition: service_healthy
+{%- endif %}
+    restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          cpus: '0.5'
+          memory: 256M
+{%- endif %}
+
 {%- if cookiecutter.use_frontend %}
 
   frontend:
@@ -394,7 +488,13 @@ services:
       - "traefik.http.routers.{{ cookiecutter.project_slug }}-frontend.middlewares={{ cookiecutter.project_slug }}-security-headers@docker"
       - "traefik.http.services.{{ cookiecutter.project_slug }}-frontend.loadbalancer.server.port={{ cookiecutter.frontend_port }}"
       - "traefik.docker.network=traefik-public"
+{%- elif cookiecutter.include_nginx_service %}
+    networks:
+      - backend-internal
+    # No ports exposed - nginx handles external traffic
 {%- else %}
+    networks:
+      - backend-internal
     ports:
       - "{{ cookiecutter.frontend_port }}:{{ cookiecutter.frontend_port }}"
 {%- endif %}