services:
  vuln:
    build:
      context: ./vuln
    image: cve-2026-28496-fossbilling-vuln:0.7.2
    container_name: cve-2026-28496-vuln
    restart: unless-stopped
    ports:
      - "8081:80"
    depends_on:
      vuln-db:
        condition: service_healthy
    networks:
      - cve-2026-28496-net

  patched:
    build:
      context: ./patched
    image: cve-2026-28496-fossbilling-patched:0.8.0
    container_name: cve-2026-28496-patched
    restart: unless-stopped
    ports:
      - "8082:80"
    depends_on:
      patched-db:
        condition: service_healthy
    networks:
      - cve-2026-28496-net

  vuln-db:
    image: mariadb:lts
    container_name: cve-2026-28496-vuln-db
    restart: unless-stopped
    environment:
      MARIADB_DATABASE: fossbilling
      MARIADB_USER: fossbilling
      MARIADB_PASSWORD: fossbilling
      MARIADB_RANDOM_ROOT_PASSWORD: "1"
    healthcheck:
      test: ["CMD-SHELL", "mariadb-admin ping -h 127.0.0.1 -u fossbilling -pfossbilling --silent"]
      interval: 5s
      timeout: 5s
      retries: 30
    networks:
      - cve-2026-28496-net

  patched-db:
    image: mariadb:lts
    container_name: cve-2026-28496-patched-db
    restart: unless-stopped
    environment:
      MARIADB_DATABASE: fossbilling
      MARIADB_USER: fossbilling
      MARIADB_PASSWORD: fossbilling
      MARIADB_RANDOM_ROOT_PASSWORD: "1"
    healthcheck:
      test: ["CMD-SHELL", "mariadb-admin ping -h 127.0.0.1 -u fossbilling -pfossbilling --silent"]
      interval: 5s
      timeout: 5s
      retries: 30
    networks:
      - cve-2026-28496-net

  installer-vuln:
    image: curlimages/curl:8.11.1
    container_name: cve-2026-28496-installer-vuln
    depends_on:
      vuln:
        condition: service_started
      vuln-db:
        condition: service_healthy
    volumes:
      - ./scripts/auto-install.sh:/auto-install.sh:ro
    command:
      - sh
      - /auto-install.sh
      - vulnerable-0.7.2
      - http://vuln
      - http://localhost:8081
      - vuln-db
    restart: "no"
    networks:
      - cve-2026-28496-net

  installer-patched:
    image: curlimages/curl:8.11.1
    container_name: cve-2026-28496-installer-patched
    depends_on:
      patched:
        condition: service_started
      patched-db:
        condition: service_healthy
    volumes:
      - ./scripts/auto-install.sh:/auto-install.sh:ro
    command:
      - sh
      - /auto-install.sh
      - patched-0.8.0
      - http://patched
      - http://localhost:8082
      - patched-db
    restart: "no"
    networks:
      - cve-2026-28496-net

networks:
  cve-2026-28496-net:
    driver: bridge