services:
  backend:
    image: bl4nk404/audiovault:latest
    container_name: audiovault-backend
    restart: unless-stopped
    command: uvicorn app.main:app --host 0.0.0.0 --port 8000 --proxy-headers --forwarded-allow-ips '*'
    volumes:
      - audiovault-downloads:/downloads
      - audiovault-cache:/cache
      # No code mounts in production
    ports:
      - "8000:8000"
      - "9900:9900"
    env_file:
      - .env
    environment:
      - DATABASE_URL=postgresql+asyncpg://postgres:postgres@db:5432/audiovault
      - REDIS_URL=redis://redis:6379/0
      - ALLOWED_HOSTS=*
      - BACKEND_CORS_ORIGINS=${BACKEND_CORS_ORIGINS:-http://localhost:2137}
      - ENVIRONMENT=production
      - TIMEZONE=${TIMEZONE:-UTC}
      - TZ=${TIMEZONE:-UTC}
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - audiovault-network

  frontend:
    image: bl4nk404/audiovault-frontend:latest
    container_name: audiovault-frontend
    restart: unless-stopped
    ports:
      - "2137:8080"
    depends_on:
      - backend
    networks:
      - audiovault-network

  db:
    image: public.ecr.aws/docker/library/postgres:16-alpine@sha256:f4610795587492cd4fb887c2dc3de301b813278bb6f616992061141b5f15ac36 # refresh digest on bump
    container_name: audiovault-db
    restart: always
    volumes:
      - audiovault-db-data:/var/lib/postgresql/data
    environment:
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=postgres
      - POSTGRES_DB=audiovault
      - TZ=${TIMEZONE:-UTC}
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 10s
      timeout: 5s
      retries: 5
    ports:
      - "15432:5432"
    networks:
      - audiovault-network

  redis:
    image: public.ecr.aws/docker/library/redis:8-alpine@sha256:0bf6577d7774e592b29d093e3ac9390eb91e13d72c21e506afce736de5e0eeb0 # refresh digest on bump
    container_name: audiovault-redis
    restart: always
    command: redis-server --appendonly yes
    volumes:
      - audiovault-redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    ports:
      - "16379:6379"
    networks:
      - audiovault-network

networks:
  audiovault-network:
    driver: bridge

volumes:
  audiovault-db-data:
  audiovault-redis-data:
  audiovault-cache:
  audiovault-downloads: