version: "3.8"

networks:
  dokploy-network:
    external: true
  cvfs-network:

services:
  webapp:
    container_name: "cvfs-webapp"
    build:
      context: ./
      dockerfile: ./docker/webapp.Dockerfile
      args:
        NEXT_PUBLIC_AUTHENTIK_ISSUER: ${NEXT_PUBLIC_AUTHENTIK_ISSUER}
        NEXT_PUBLIC_AUTHENTIK_CLIENT_ID: ${NEXT_PUBLIC_AUTHENTIK_CLIENT_ID}
        NEXT_PUBLIC_BASE_URL: ${NEXT_PUBLIC_BASE_URL:-https://cv.alves.world}
    environment:
      - API_BASE_URL=http://cvfs-backend:8080
      - AUTHENTIK_ISSUER=${AUTHENTIK_ISSUER}
      - AUTHENTIK_CLIENT_ID=${AUTHENTIK_CLIENT_ID}
      - AUTHENTIK_CLIENT_SECRET=${AUTHENTIK_CLIENT_SECRET}
      - NEXT_PUBLIC_AUTHENTIK_ISSUER=${NEXT_PUBLIC_AUTHENTIK_ISSUER}
      - NEXT_PUBLIC_AUTHENTIK_CLIENT_ID=${NEXT_PUBLIC_AUTHENTIK_CLIENT_ID}
      - NEXT_PUBLIC_BASE_URL=${NEXT_PUBLIC_BASE_URL:-https://cv.alves.world}
    networks:
      - dokploy-network
      - cvfs-network
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.cvfs-webapp.rule=Host(`cv.alves.world`)"
      - "traefik.http.services.cvfs-webapp.loadbalancer.server.port=3000"
      - "traefik.http.routers.cvfs-webapp.entrypoints=websecure"
      - "traefik.http.routers.cvfs-webapp.tls.certresolver=letsencrypt"

  backend:
    container_name: "cvfs-backend"
    build:
      context: ./
      dockerfile: ./docker/backend-fastapi.Dockerfile
    environment:
      - BACKEND_PORT=8080
      - DATABASE_URL=postgresql+asyncpg://postgres:postgres@cvfs-postgres:5432/resume_branches
      - MINIO_ENDPOINT=https://storage.cv.alves.world
      - MINIO_BUCKET=resume-branches
      - MINIO_REGION=us-east-1
      - MINIO_ROOT_USER=${MINIO_ROOT_USER:-minioadmin}
      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD:-minioadmin}
      - PUBLIC_BASE_URL=https://cv.alves.world
      - CV_PUBLIC_DOMAIN=cv.alves.world
      - REDIS_URL=redis://cvfs-redis:6379/0
      - CELERY_BROKER_URL=redis://cvfs-redis:6379/0
      - CELERY_RESULT_BACKEND=redis://cvfs-redis:6379/0
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      - AUTH_OIDC_ISSUER=${AUTH_OIDC_ISSUER}
      - AUTH_OIDC_AUDIENCE=${AUTH_OIDC_AUDIENCE}
      - AUTH_DISABLE_VERIFICATION=${AUTH_DISABLE_VERIFICATION:-false}
    depends_on:
      - postgres
      - minio
      - redis
    networks:
      - dokploy-network
      - cvfs-network
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.cvfs-backend.rule=Host(`api.cv.alves.world`)"
      - "traefik.http.services.cvfs-backend.loadbalancer.server.port=8080"
      - "traefik.http.routers.cvfs-backend.entrypoints=websecure"
      - "traefik.http.routers.cvfs-backend.tls.certresolver=letsencrypt"

  worker:
    container_name: "cvfs-worker"
    build:
      context: ./
      dockerfile: ./docker/worker.Dockerfile
    environment:
      - REDIS_URL=redis://cvfs-redis:6379/0
      - CELERY_BROKER_URL=redis://cvfs-redis:6379/0
      - CELERY_RESULT_BACKEND=redis://cvfs-redis:6379/0
      - MINIO_ENDPOINT=https://storage.cv.alves.world
      - MINIO_BUCKET=resume-branches
      - MINIO_REGION=us-east-1
      - MINIO_ROOT_USER=${MINIO_ROOT_USER:-minioadmin}
      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD:-minioadmin}
      - PYTHONPATH=/app
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
    depends_on:
      - redis
      - minio
    networks:
      - cvfs-network
    restart: unless-stopped

  redis:
    container_name: "cvfs-redis"
    image: redis:7-alpine
    volumes:
      - redis_data:/data
    networks:
      - cvfs-network
    restart: unless-stopped

  postgres:
    image: postgres:15-alpine
    container_name: "cvfs-postgres"
    environment:
      POSTGRES_DB: resume_branches
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - cvfs-network
    restart: unless-stopped

  minio:
    image: minio/minio:latest
    container_name: "cvfs-minio"
    environment:
      - MINIO_ROOT_USER=${MINIO_ROOT_USER:-minioadmin}
      - MINIO_ROOT_PASSWORD=${MINIO_ROOT_PASSWORD:-minioadmin}
    volumes:
      - minio_data:/data
    command: server /data --console-address ":9001"
    networks:
      - cvfs-network
      - dokploy-network
    restart: unless-stopped

  create-bucket:
    image: minio/mc
    container_name: "cvfs-create-bucket"
    depends_on:
      - minio
    networks:
      - cvfs-network
    entrypoint: >
      /bin/sh -c "
      sleep 5;
      mc alias set myminio http://cvfs-minio:9000 $${MINIO_ROOT_USER:-minioadmin} $${MINIO_ROOT_PASSWORD:-minioadmin};
      mc mb myminio/resume-branches --ignore-existing;
      mc anonymous set public myminio/resume-branches;
      exit 0;
      "

volumes:
  redis_data:
  postgres_data:
  minio_data: