docker-compose.yml

services:
  # ── Infrastructure ────────────────────────────────────────────────────────
  redis:
    image: redis:7-alpine
    # No host port — only the api container needs this, over the Docker network
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5

  timescaledb:
    image: timescale/timescaledb:latest-pg16
    # No host port — only the api container needs this, over the Docker network
    environment:
      POSTGRES_USER: ${DB_USER:-sentinel}
      POSTGRES_PASSWORD: ${DB_PASSWORD:-sentinel}
      POSTGRES_DB: ${DB_NAME:-sentinel}
    volumes:
      - timescale_data:/var/lib/postgresql/data
      - ./infra/init_db.sql:/docker-entrypoint-initdb.d/init.sql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-sentinel}"]
      interval: 5s
      timeout: 3s
      retries: 10

  # ── API server ────────────────────────────────────────────────────────────
  api:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "127.0.0.1:8000:8000"   # localhost only — Nginx proxies inbound traffic
    environment:
      DB_HOST: timescaledb
      DB_PORT: 5432
      DB_USER: ${DB_USER:-sentinel}
      DB_PASSWORD: ${DB_PASSWORD:-sentinel}
      DB_NAME: ${DB_NAME:-sentinel}
      REDIS_HOST: redis
      REDIS_PORT: 6379
    volumes:
      - ./artifacts:/app/artifacts
      - hf_cache:/cache/huggingface
    depends_on:
      timescaledb:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped

  # ── Next.js dashboard ─────────────────────────────────────────────────────
  dashboard:
    build:
      context: ./dashboard
      dockerfile: Dockerfile
      args:
        # Full base URL of the API — baked into the JS bundle at build time
        NEXT_PUBLIC_API_BASE: ${API_BASE:-http://localhost:8000}
    ports:
      - "127.0.0.1:3000:3000"   # localhost only — Nginx proxies inbound traffic
    depends_on:
      - api
    restart: unless-stopped

volumes:
  redis_data:
  timescale_data:
  hf_cache: