services:
  postgres:
    image: postgres:17-alpine
    environment:
      POSTGRES_USER: jaztasks
      POSTGRES_PASSWORD: jaztasks
      POSTGRES_DB: jaztasks
    ports:
      - "55432:5432"
    volumes:
      - postgres:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U jaztasks"]
      interval: 2s
      timeout: 3s
      retries: 30

  server:
    build: .
    environment:
      DATABASE_URL: postgres://jaztasks:jaztasks@postgres:5432/jaztasks?sslmode=disable
      PUBLIC_URL: ${PUBLIC_URL:-http://localhost:7400}
      AUTH_PROVIDER: ${AUTH_PROVIDER:-oidc}
      FIREBASE_CONFIG: ${FIREBASE_CONFIG:-}
      OIDC_ISSUER: ${OIDC_ISSUER:-}
      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID:-}
      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET:-}
      ALLOWED_EMAIL_DOMAINS: ${ALLOWED_EMAIL_DOMAINS:-}
      ALLOWED_EMAILS: ${ALLOWED_EMAILS:-}
      OWNER_EMAIL: ${OWNER_EMAIL:-}
      OWNER_API_KEY: ${OWNER_API_KEY:-}
    ports:
      - "7400:7400"
    depends_on:
      postgres:
        condition: service_healthy

volumes:
  postgres: