services:
  traefik:
    image: traefik:v3
    container_name: incubyte-traefik
    restart: unless-stopped
    command:
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https
      - --entrypoints.web.http.redirections.entrypoint.permanent=true
      - --certificatesresolvers.letsencrypt.acme.tlschallenge=true
      - --certificatesresolvers.letsencrypt.acme.email=${TRAEFIK_ACME_EMAIL:-admin@jadhav.dev}
      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - traefik_letsencrypt:/letsencrypt

  backend:
    build:
      context: .
      dockerfile: backend/Dockerfile
    container_name: incubyte-backend
    restart: unless-stopped
    env_file:
      - backend/.env.docker
    depends_on:
      postgres:
        condition: service_healthy
    labels:
      - traefik.enable=true
      - traefik.http.routers.incubyte-backend.rule=Host(`incubyte-assesment.jadhav.dev`) && PathPrefix(`/api`)
      - traefik.http.routers.incubyte-backend.entrypoints=websecure
      - traefik.http.routers.incubyte-backend.tls.certresolver=letsencrypt
      - traefik.http.routers.incubyte-backend.priority=100
      - traefik.http.routers.incubyte-backend.middlewares=incubyte-backend-strip
      - traefik.http.middlewares.incubyte-backend-strip.stripprefix.prefixes=/api
      - traefik.http.services.incubyte-backend.loadbalancer.server.port=8000

  frontend:
    build:
      context: .
      dockerfile: frontend/Dockerfile
      args:
        VITE_API_BASE_URL: /api
    container_name: incubyte-frontend
    restart: unless-stopped
    depends_on:
      - backend
    labels:
      - traefik.enable=true
      - traefik.http.routers.incubyte-frontend.rule=Host(`incubyte-assesment.jadhav.dev`)
      - traefik.http.routers.incubyte-frontend.entrypoints=websecure
      - traefik.http.routers.incubyte-frontend.tls.certresolver=letsencrypt
      - traefik.http.routers.incubyte-frontend.priority=1
      - traefik.http.services.incubyte-frontend.loadbalancer.server.port=3000

  postgres:
    image: postgres:18
    container_name: incubyte-postgres
    restart: unless-stopped
    env_file:
      - backend/.env.docker
    ports:
      - "127.0.0.1:5432:5432"
    volumes:
      - postgres_18_data:/var/lib/postgresql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
      interval: 5s
      timeout: 5s
      retries: 5

volumes:
  postgres_18_data:
  traefik_letsencrypt: