docker-compose.yml

services:
  # PostgreSQL Database
  db:
    image: postgres:15-alpine
    restart: unless-stopped
    container_name: nachweise-db
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-nachweise_db}
      POSTGRES_USER: ${POSTGRES_USER:-nachweise_user}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
      POSTGRES_INITDB_ARGS: "--encoding=UTF8"
      # Performance tuning for development
      POSTGRES_MAX_CONNECTIONS: ${POSTGRES_MAX_CONNECTIONS:-100}
    volumes:
      - nachweise_postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    networks:
      - nachweise-network
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "pg_isready -U ${POSTGRES_USER:-nachweise_user} -d ${POSTGRES_DB:-nachweise_db}",
        ]
      interval: 5s
      timeout: 10s
      retries: 10
      start_period: 30s

  # Redis Cache
  redis:
    image: redis:7-alpine
    restart: unless-stopped
    container_name: nachweise-redis
    ports:
      - "6379:6379"
    networks:
      - nachweise-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Java Backend (Spring Boot)
  backend:
    # image: ghcr.io/${GITHUB_ACTOR:-vuducle}/nachweise-backend:latest
    build:
      context: ./backend
      dockerfile: Dockerfile
    pull_policy: always
    restart: unless-stopped
    container_name: backend-nachweise
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    environment:
      # Spring profiles and database
      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE:-production}
      SPRING_DATASOURCE_URL: ${SPRING_DATASOURCE_URL:-jdbc:postgresql://db:5432/nachweise_db}
      SPRING_DATASOURCE_USERNAME: ${SPRING_DATASOURCE_USERNAME:-nachweise_user}
      SPRING_DATASOURCE_PASSWORD: ${SPRING_DATASOURCE_PASSWORD:-changeme}
      SPRING_DATASOURCE_DRIVER_CLASS_NAME: org.postgresql.Driver

      # Connection pooling (HikariCP)
      SPRING_DATASOURCE_HIKARI_MAXIMUM_POOL_SIZE: ${SPRING_HIKARI_MAX_POOL_SIZE:-10}
      SPRING_DATASOURCE_HIKARI_MINIMUM_IDLE: ${SPRING_HIKARI_MIN_IDLE:-5}
      SPRING_DATASOURCE_HIKARI_CONNECTION_TIMEOUT: ${SPRING_HIKARI_CONNECTION_TIMEOUT:-30000}

      # JPA configuration
      SPRING_JPA_HIBERNATE_DDL_AUTO: ${SPRING_JPA_DDL_AUTO:-validate}
      SPRING_JPA_SHOW_SQL: ${SPRING_JPA_SHOW_SQL:-false}
      SPRING_JPA_PROPERTIES_HIBERNATE_DIALECT: org.hibernate.dialect.PostgreSQLDialect
      SPRING_JPA_PROPERTIES_HIBERNATE_FORMAT_SQL: ${HIBERNATE_FORMAT_SQL:-false}

      # Server configuration
      SERVER_PORT: ${SERVER_PORT:-8088}
      SERVER_SERVLET_CONTEXT_PATH: /

      # JWT and Security
      JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-key-change-in-production-min-32-chars}
      JWT_EXPIRATION: ${JWT_EXPIRATION:-86400000}

      # Mail configuration (optional, for password reset)
      SPRING_MAIL_HOST: ${SPRING_MAIL_HOST:-smtp.hostinger.com}
      SPRING_MAIL_PORT: ${SPRING_MAIL_PORT:-587}
      SPRING_MAIL_USERNAME: ${SPRING_MAIL_USERNAME}
      SPRING_MAIL_PASSWORD: ${SPRING_MAIL_PASSWORD}
      SPRING_MAIL_PROPERTIES_MAIL_SMTP_AUTH: ${SPRING_MAIL_SMTP_AUTH:-true}
      SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_ENABLE: ${SPRING_MAIL_STARTTLS_ENABLE:-true}
      SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_REQUIRED: ${SPRING_MAIL_STARTTLS_REQUIRED:-true}

      # Frontend URL for CORS
      APP_FRONTEND_URL: ${APP_FRONTEND_URL:-http://localhost:3000}
      APP_FRONTEND_ORIGINS: ${APP_FRONTEND_ORIGINS:-http://localhost:3000}

      # Redis configuration
      REDIS_HOST: ${REDIS_HOST:-redis}
      REDIS_PORT: ${REDIS_PORT:-6379}

      # JVM options - increased for stability
      JAVA_OPTS: ${JAVA_OPTS:--Xmx1024m -Xms512m -XX:+UseG1GC -XX:MaxGCPauseMillis=200}

      # Logging
      LOGGING_LEVEL_ROOT: ${LOGGING_LEVEL_ROOT:-INFO}
      LOGGING_LEVEL_ORG_SPRINGFRAMEWORK: ${LOGGING_LEVEL_SPRINGFRAMEWORK:-INFO}
      LOGGING_LEVEL_ORG_HIBERNATE: ${LOGGING_LEVEL_HIBERNATE:-WARN}

    ports:
      - "${BACKEND_PORT:-8088}:8088"
    volumes:
      - ./backend/uploads:/app/uploads
      - ./backend/generated_pdfs:/app/generated_pdfs
    networks:
      - nachweise-network
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8088/actuator/health/db"]
      interval: 10s
      timeout: 10s
      retries: 5
      start_period: 60s

  # Next.js Frontend
  frontend:
    # image: ghcr.io/${GITHUB_ACTOR:-vuducle}/nachweise-frontend:latest
    build:
      context: ./client-nachweise
      dockerfile: Dockerfile
      args:
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-https://api-nachweise.le-vu-duc.com:8088}
    pull_policy: always
    restart: unless-stopped
    container_name: nachweise-frontend
    depends_on:
      - backend
    environment:
      # Frontend environment variables
      NODE_ENV: ${NODE_ENV:-production}
      NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:8088}

    ports:
      - "${FRONTEND_PORT:-3000}:3000"
    networks:
      - nachweise-network
    healthcheck:
      test:
        [
          "CMD",
          "wget",
          "--quiet",
          "--tries=1",
          "--spider",
          "http://localhost:3000",
        ]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 40s

  # Caddy Reverse Proxy (Production Setup)
  # caddy:
  #   image: caddy:2-alpine
  #   restart: unless-stopped
  #   container_name: nachweise-caddy
  #   ports:
  #     - "80:80"
  #     - "443:443"
  #   volumes:
  #     - ./Caddyfile/Caddyfile:/etc/caddy/Caddyfile:ro
  #     - caddy_data:/data
  #     - caddy_config:/config
  #   depends_on:
  #     - frontend
  #     - backend
  #   networks:
  #     - nachweise-network
  #   environment:
  #     CADDY_AGREE: "true"

  # Portainer - Docker Management UI
  # portainer:
  #   image: portainer/portainer-ce:latest
  #   restart: unless-stopped
  #   container_name: nachweise-portainer
  #   ports:
  #     - "9000:9000"
  #     - "8000:8000"
  #   volumes:
  #     - /var/run/docker.sock:/var/run/docker.sock
  #     - portainer_data:/data
  #   networks:
  #     - nachweise-network
  #   environment:
  #     # Configure Portainer for reverse proxy (SubPath)
  #     SCRIPT_NAME: ${PORTAINER_SCRIPT_NAME:-/portainer}
  #     # Optional: Set admin password
  #     # PORTAINER_ADMIN_PASSWORD: ${PORTAINER_ADMIN_PASSWORD:-}
  #     TZ: UTC
  #   command:
  #     - "--base-url=/portainer"
  #     - "--log-level=info"
  #   healthcheck:
  #     test:
  #       [
  #         "CMD",
  #         "wget",
  #         "--quiet",
  #         "--tries=1",
  #         "--spider",
  #         "http://localhost:9000/portainer",
  #       ]
  #     interval: 30s
  #     timeout: 5s
  #     retries: 3
  #     start_period: 60s

volumes:
  nachweise_postgres_data:
    driver: local
  # caddy_data:
  #   driver: local
  # caddy_config:
  #   driver: local
  # portainer_data:
  #   driver: local

networks:
  nachweise-network:
    driver: bridge