docker-compose.yml

# Compose v2+ syntax (no explicit version key needed)

# Reusable env-file anchor
x-env: &default-env
  env_file:
    - .env

networks:
  plugbot-network:
    driver: bridge

volumes:
  postgres_data:
  redis_data:

services:
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    <<: *default-env
    environment:
      POSTGRES_INITDB_ARGS: "--encoding=UTF8"
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB}
      # Optional but nice to have
      TZ: ${TZ:-UTC}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U ${POSTGRES_USER} -d ${POSTGRES_DB}" ]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - plugbot-network

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command: >
      redis-server
      --appendonly yes
      --maxmemory 256mb
      --maxmemory-policy allkeys-lru
    volumes:
      - redis_data:/data
    healthcheck:
      # 'ping' returns PONG when healthy
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - plugbot-network

  # NEW: run DB migrations once, then exit successfully.
  migrator:
    build:
      context: ./backend
      dockerfile: Dockerfile
    restart: "no"
    init: true
    <<: *default-env
    environment:
      # only what the migrator actually needs
      DATABASE_URL: ${DATABASE_URL}
      TZ: ${TZ:-UTC}
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    command: >
      sh -c "alembic upgrade head"
    networks:
      - plugbot-network

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    restart: unless-stopped
    init: true
    <<: *default-env
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
      migrator:
        condition: service_completed_successfully
    environment:
      DATABASE_URL: ${DATABASE_URL}
      REDIS_URL: ${REDIS_URL}
      SECRET_KEY: ${SECRET_KEY}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
      BACKEND_CORS_ORIGINS: ${BACKEND_CORS_ORIGINS}
      SMTP_HOST: ${SMTP_HOST}
      SMTP_PORT: ${SMTP_PORT}
      SMTP_USERNAME: ${SMTP_USERNAME}
      SMTP_PASSWORD: ${SMTP_PASSWORD}
      SMTP_FROM: ${SMTP_FROM}
      SMTP_STARTTLS: ${SMTP_STARTTLS}
      DEFAULT_LANGUAGE: ${DEFAULT_LANGUAGE}
      ALLOW_REGISTRATION: ${ALLOW_REGISTRATION}
      FRONTEND_URL: ${FRONTEND_URL}
      TZ: ${TZ:-UTC}
    ports:
      - "${BACKEND_PORT}:8000"
      # If you later add HTTPS termination inside the container, expose it here:
      # - "${BACKEND_HTTPS_PORT:-8532}:8443"
    command: >
      uvicorn app.main:app
      --host 0.0.0.0
      --port 8000
      --proxy-headers
      --forwarded-allow-ips='*'
    healthcheck:
      test: [ "CMD", "curl", "-fsS", "http://localhost:8000/health" ]
      interval: 30s
      timeout: 10s
      retries: 3
    networks:
      - plugbot-network

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        # CRITICAL: build-time public URL for Next.js (must be HTTPS in prod)
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL}
    restart: unless-stopped
    init: true
    depends_on:
      backend:
        condition: service_healthy
    environment:
      NODE_ENV: production
      # Runtime exposure (handy for client-side fetches)
      NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL}
      TZ: ${TZ:-UTC}
    ports:
      - "${FRONTEND_PORT}:3000"
    healthcheck:
      # Use a lightweight HEAD to the root (adjust to your /health route if you have one)
      test: [ "CMD", "curl", "-fsS", "http://localhost:3000" ]
      interval: 30s
      timeout: 10s
      retries: 3
    networks:
      - plugbot-network