services:
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    privileged: true
    security_opt:
      - apparmor:unconfined
    environment:
      POSTGRES_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env.production}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env.production}
      POSTGRES_DB: ${POSTGRES_DB:-drinktracker}
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U drinktracker -d drinktracker"]
      interval: 5s
      timeout: 5s
      retries: 5

  minio:
    image: minio/minio:latest
    restart: unless-stopped
    privileged: true
    security_opt:
      - apparmor:unconfined
    environment:
      MINIO_ROOT_USER: ${MINIO_ACCESS_KEY:?Set MINIO_ACCESS_KEY in .env.production}
      MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY:?Set MINIO_SECRET_KEY in .env.production}
    volumes:
      - miniodata:/data
    command: server /data --console-address ":9001"
    healthcheck:
      test: ["CMD", "mc", "ready", "local"]
      interval: 5s
      timeout: 5s
      retries: 5

  minio-init:
    image: minio/mc:latest
    privileged: true
    security_opt:
      - apparmor:unconfined
    depends_on:
      minio:
        condition: service_healthy
    environment:
      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
    entrypoint: >
      /bin/sh -c "
      mc alias set local http://minio:9000 $$MINIO_ACCESS_KEY $$MINIO_SECRET_KEY;
      mc mb local/drink-images --ignore-existing;
      mc anonymous set download local/drink-images;
      exit 0;
      "

  migrate:
    image: node:20-alpine
    privileged: true
    security_opt:
      - apparmor:unconfined
    depends_on:
      db:
        condition: service_healthy
    working_dir: /app
    volumes:
      - ./prisma:/app/prisma
      - ./package.json:/app/package.json
      - ./package-lock.json:/app/package-lock.json
    env_file:
      - .env.production
    environment:
      DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-drinktracker}"
    command: sh -c "npm install prisma @prisma/client --silent && npx prisma db push --skip-generate --accept-data-loss"
    restart: "no"

  app:
    image: jpscott84/drinktracker:latest
    restart: unless-stopped
    privileged: true
    security_opt:
      - apparmor:unconfined
    ports:
      - "3000:3000"
    depends_on:
      db:
        condition: service_healthy
      minio:
        condition: service_healthy
      migrate:
        condition: service_completed_successfully
    env_file:
      - .env.production
    environment:
      DATABASE_URL: "postgresql://${POSTGRES_USER:-drinktracker}:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB:-drinktracker}"
      MINIO_ENDPOINT: "minio"

volumes:
  pgdata:
  miniodata: