services:
  db:
    image: docker.io/library/postgres:16-alpine
    restart: unless-stopped
    # NOTE: Change POSTGRES_PASSWORD in production. Consider using Docker secrets or
    # a managed PostgreSQL service instead of local credentials.
    environment:
      POSTGRES_DB: kmountain
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - pgdata:/var/lib/postgresql/data
      - pgsocket:/var/run/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 5s
      retries: 5

  # NOTE: Update KMTN_CORS_ORIGINS in production to your actual domain(s).
  # Set KMTN_DATABASE_URL to your managed PostgreSQL connection if not using the local db service.
  api:
    image: truenas.local:35000/kmtnflower-api:latest
    restart: unless-stopped
    environment:
      KMTN_DATABASE_URL: postgresql+asyncpg://postgres:postgres@/kmountain?host=/var/run/postgresql
      KMTN_CORS_ORIGINS: '["http://truenas.local:4200", "http://truenas.local"]'
      KMTN_ADMIN_USERNAME: admin
      KMTN_ADMIN_PASSWORD: 123
    volumes:
      - pgsocket:/var/run/postgresql
    ports:
      - "8000:8000"
    depends_on:
      db:
        condition: service_healthy

  frontend:
    image: truenas.local:35000/kmtnflower:latest
    restart: unless-stopped
    environment:
      API_UPSTREAM: http://api:8000
      API_PUBLIC_URL: "http://truenas.local:8000"
    ports:
      - "4200:80"
    depends_on:
      - api

volumes:
  pgdata:
  pgsocket: