services:
  app:
    image: ghcr.io/meshcore-beacon/beacon-server:latest
    env_file: .env
    ports:
      - "127.0.0.1:8080:8080"
    volumes:
      - ./data/app/config.yaml:/app/config.yaml:ro
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped

  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: beacon
      POSTGRES_PASSWORD: CHANGE_PASS
      POSTGRES_DB: beacon
    volumes:
      - ./data/postgres/:/var/lib/postgresql/data
    ports:
      - "127.0.0.1:5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U beacon"]
      interval: 5s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    volumes:
      - ./data/redis/:/data
    ports:
      - "127.0.0.1:6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  caddy:
    image: caddy:2-alpine
    ports:
      - "80:80"
      - "443:443"
    environment:
      - DOMAIN=${DOMAIN:?DOMAIN environment variable is required}
      - WEB_DOMAIN=${WEB_DOMAIN:?WEB_DOMAIN environment variable is required}
    env_file: .env
    volumes:
      - ./data/Caddy/CaddyFile/Caddyfile.proxy:/etc/caddy/Caddyfile
      - ./data/Caddy/conf.d:/etc/caddy/conf.d:ro
      - ./data/Caddy/logs:/var/log/caddy
      - ./data/Caddy/data:/data/caddy/
      - ./data/Caddy/config:/config/caddy/
    depends_on:
      app:
        condition: service_started
    restart: unless-stopped

# Fixed subnet so data/app/config.yaml can trust Caddy in server.trusted_proxies.
# Pick another private /24 if this one is already in use on the host.
networks:
  default:
    ipam:
      config:
        - subnet: 172.30.0.0/24