services:
  postgres:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: tisc_passkey
      POSTGRES_PASSWORD: tisc_passkey
      POSTGRES_DB: tisc_passkey
    volumes:
      - postgres_data:/var/lib/postgresql/data
    # No ports exposed to host - only accessible from app container
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U tisc_passkey"]
      interval: 5s
      timeout: 5s
      retries: 5

  app:
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    environment:
      # Application configuration
      # Update these values according to your deployment needs
      APP_NAME: passkey.tisc
      APP_DOMAIN: localhost  # Change to your domain
      PASSKEY_ORIGIN: http://localhost:8080  # Change to your URL (https://yourdomain.com). Passkey requires HTTPS, unless it's localhost.
      JETZIG_SESSION_COOKIE: passkey.tisc
      JETZIG_SECRET: DeJWl0rH5a7r8w2AVtyjfapwt9r8urp4fdX95Ttov2YMxrwDOcOeKyLMOylEPlOf9cfHwfSppq2d9NNIrp2phHi1kJ7xyhG9nq31eTBkc4PgT3LJrb1AXyqJbxxZ9mOu

      # CTF Flag
      CTF_FLAG: TISC{p4ssk3y_is_gr3a7_t|sC}

      # Database connection (uses Docker network)
      JETQUERY_HOSTNAME: postgres
      JETQUERY_PORT: 5432
      JETQUERY_USERNAME: tisc_passkey
      JETQUERY_PASSWORD: tisc_passkey
      JETQUERY_DATABASE: tisc_passkey
      JETZIG_ENVIRONMENT: development
    ports:
      - "8080:8080"
    depends_on:
      postgres:
        condition: service_healthy

volumes:
  postgres_data: