version: "3.9"

services:
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-peld}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-peld}
      POSTGRES_DB: ${POSTGRES_DB:-peld}
    volumes:
      - pgdata:/var/lib/postgresql/data
      - ./server/db/migrations:/docker-entrypoint-initdb.d:ro
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-peld}"]
      interval: 5s
      timeout: 5s
      retries: 10
    mem_limit: 1g
    cpus: 2

  cache:
    image: memcached:1.6-alpine
    restart: unless-stopped
    command: memcached -m 256
    ports:
      - "11211:11211"
    healthcheck:
      test: ["CMD-SHELL", "echo stats | nc localhost 11211 | grep -q pid"]
      interval: 10s
      timeout: 3s
      retries: 3
    mem_limit: 256m
    cpus: 0.5

  app:
    build:
      context: ./server
      dockerfile: Dockerfile
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
      cache:
        condition: service_healthy
    environment:
      NODE_ENV: ${NODE_ENV:-production}
      DATABASE_URL: postgres://${POSTGRES_USER:-peld}:${POSTGRES_PASSWORD:-peld}@db:5432/${POSTGRES_DB:-peld}
      MEMCACHED_HOST: cache
      MEMCACHED_PORT: 11211
      SESSION_SECRET: ${SESSION_SECRET}
      OIDC_ISSUER: ${OIDC_ISSUER}
      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
      OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI}
      ESI_BASE_URL: https://esi.evetech.net
      NCHAN_PUB_URL: http://nchan/pub/fleet
      PORT: 3000
      # ── Tunable operational constants (all have safe defaults) ──
      PILOT_TTL_S: ${PILOT_TTL_S:-15}
      FLEET_AGG_TTL_S: ${FLEET_AGG_TTL_S:-5}
      BREAKDOWN_MAX_ENTRIES: ${BREAKDOWN_MAX_ENTRIES:-20}
      MEMBER_POLL_INTERVAL_MS: ${MEMBER_POLL_INTERVAL_MS:-30000}
      RETENTION_STARTUP_DELAY_MS: ${RETENTION_STARTUP_DELAY_MS:-60000}
      RETENTION_INTERVAL_MS: ${RETENTION_INTERVAL_MS:-86400000}
      SESSION_MAX_AGE_MS: ${SESSION_MAX_AGE_MS:-604800000}
      RATE_LIMIT_MAX: ${RATE_LIMIT_MAX:-1000}
      RATE_LIMIT_WINDOW: ${RATE_LIMIT_WINDOW:-1 minute}
      DB_POOL_MAX: ${DB_POOL_MAX:-20}
      DB_IDLE_TIMEOUT_MS: ${DB_IDLE_TIMEOUT_MS:-30000}
      DB_CONNECT_TIMEOUT_MS: ${DB_CONNECT_TIMEOUT_MS:-5000}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/health"]
      interval: 10s
      timeout: 5s
      start_period: 15s
      retries: 3
    mem_limit: 512m
    cpus: 1

  nchan:
    build:
      context: ./nginx
      dockerfile: Dockerfile
    restart: unless-stopped
    depends_on:
      app:
        condition: service_healthy
    ports:
      - "80:80"
    volumes:
      - ./client/dist:/usr/share/nginx/html:ro
    mem_limit: 256m
    cpus: 0.5

volumes:
  pgdata: