version: "3.9"

services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL}
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3000/', r => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    environment:
      DATABASE_URL: postgres://${POSTGRES_USER:-portfolio}:${POSTGRES_PASSWORD}@db:5432/portfolio_db
      AUTH_SECRET: ${AUTH_SECRET}
      AUTH_URL: ${AUTH_URL}
      RESEND_API_KEY: ${RESEND_API_KEY}
      CONTACT_EMAIL: ${CONTACT_EMAIL}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
      GITHUB_USERNAME: ${GITHUB_USERNAME}
      GITHUB_TOKEN: ${GITHUB_TOKEN}
      NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL}
      CAREER_OPS_INTERNAL_URL: http://career-ops:4200
      CAREER_OPS_INTERNAL_SECRET: ${CAREER_OPS_INTERNAL_SECRET}
    volumes:
      - cv_output:/app/public/cv-output:ro
    depends_on:
      db:
        condition: service_healthy
    networks:
      - portfolio
      - career-ops-internal

  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_DB: portfolio_db
      POSTGRES_USER: ${POSTGRES_USER:-portfolio}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-portfolio}"]
      interval: 5s
      timeout: 5s
      retries: 5
    networks:
      - portfolio

  nginx:
    image: nginx:alpine
    restart: unless-stopped
    volumes:
      - ./nginx/portfolio.conf:/etc/nginx/conf.d/default.conf:ro
      - ./nginx/certs:/etc/nginx/certs:ro
    depends_on:
      - app
    networks:
      - portfolio

  career-ops:
    build:
      context: .
      dockerfile: career-ops-server/Dockerfile
    restart: unless-stopped
    environment:
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
      CAREER_OPS_INTERNAL_SECRET: ${CAREER_OPS_INTERNAL_SECRET}
    volumes:
      - cv_output:/app/cv_output
    networks:
      - career-ops-internal

volumes:
  postgres_data:
  cv_output:

networks:
  portfolio:
    driver: bridge
  career-ops-internal:
    driver: bridge