# Synapsis - Docker Compose
# One-command deployment: docker-compose up -d
# 
# Services:
# - Synapsis Next.js application
# - PostgreSQL database (persistent storage)
# - Caddy reverse proxy with automatic SSL
#
# All state is stored in Docker volumes - source code is immutable in the image

services:
  # ============================================
  # PostgreSQL Database
  # ============================================
  postgres:
    image: postgres:16-alpine
    container_name: synapsis-db
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${DB_USER:-synapsis}
      POSTGRES_PASSWORD: ${DB_PASSWORD:-changeme}
      POSTGRES_DB: ${DB_NAME:-synapsis}
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - synapsis-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-synapsis} -d ${DB_NAME:-synapsis}"]
      interval: 10s
      timeout: 5s
      retries: 5
    deploy:
      resources:
        limits:
          memory: 1G
        reservations:
          memory: 256M

  # ============================================
  # Synapsis Application
  # ============================================
  app:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    image: synapsis:latest
    container_name: synapsis-app
    restart: unless-stopped
    environment:
      # Database connection
      DATABASE_URL: postgresql://${DB_USER:-synapsis}:${DB_PASSWORD:-changeme}@postgres:5432/${DB_NAME:-synapsis}

      # Authentication
      AUTH_SECRET: ${AUTH_SECRET}

      # Domain configuration
      DOMAIN: ${DOMAIN:-localhost}
      NEXT_PUBLIC_NODE_DOMAIN: ${NEXT_PUBLIC_NODE_DOMAIN:-}
      NEXT_PUBLIC_APP_URL: ${NEXT_PUBLIC_APP_URL:-}
      ALLOW_LOCALHOST: ${ALLOW_LOCALHOST:-}

      # Admin emails
      ADMIN_EMAILS: ${ADMIN_EMAILS}

      # Optional settings
      BOT_MAX_PER_USER: ${BOT_MAX_PER_USER:-5}

      # Port configuration (auto or specific port)
      PORT: ${PORT:-3000}

      # Node environment
      NODE_ENV: production
    volumes:
      # Uploads directory (if using local file storage)
      - uploads_data:/app/uploads
      # Shared volume for port coordination with Caddy
      - port_data:/var/run/synapsis
    networks:
      - synapsis-network
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "PORT=$$(cat /var/run/synapsis/port 2>/dev/null || echo 3000); case \"$$PORT\" in ''|*[!0-9]*) PORT=3000;; esac; wget -q --spider http://127.0.0.1:$$PORT/api/health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    deploy:
      resources:
        limits:
          memory: 1G
        reservations:
          memory: 256M

  # ============================================
  # Caddy Reverse Proxy (Automatic SSL)
  # ============================================
  caddy:
    image: caddy:2-alpine
    container_name: synapsis-caddy
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - ./caddy-entrypoint.sh:/usr/local/bin/caddy-entrypoint.sh:ro
      - caddy_data:/data
      - caddy_config:/config
      # Shared volume for port coordination with app
      - port_data:/var/run/synapsis
    networks:
      - synapsis-network
    depends_on:
      app:
        condition: service_healthy
    environment:
      - DOMAIN=${DOMAIN:-localhost}
    # Use custom entrypoint to read dynamic port from app
    entrypoint: ["/usr/local/bin/caddy-entrypoint.sh"]

# ============================================
# Persistent Volumes
# ============================================
volumes:
  postgres_data:
    driver: local
  uploads_data:
    driver: local
  caddy_data:
    driver: local
  caddy_config:
    driver: local
  port_data:
    driver: local

# ============================================
# Networks
# ============================================
networks:
  synapsis-network:
    driver: bridge