# /srv/app/production/docker-compose.yml

# Secrets: cp .env.production.example .env.production and fill in values

# Start:   docker compose up -d

# Logs:    docker compose logs -f api

services:

  db:

    image: postgres:17-alpine

    shm_size: 1g

    user: postgres

    restart: unless-stopped

    healthcheck:

      test: "pg_isready -U ${POSTGRES_USER} --dbname=${POSTGRES_DB}"

      interval: 10s

      timeout: 5s

      retries: 5

    # No ports exposed: only reachable inside the Docker network

    environment:

      POSTGRES_USER: ${POSTGRES_USER}

      POSTGRES_DB: ${POSTGRES_DB}

      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}

    volumes:

      - db_data:/var/lib/postgresql/data

  valkey:

    image: valkey/valkey:9.0-alpine

    restart: unless-stopped

    # No ports exposed

    volumes:

      - valkey_data:/data

      - ./valkey.conf:/etc/valkey/valkey.conf

    command: valkey-server /etc/valkey/valkey.conf

  api:

    image: ghcr.io/${GITHUB_REPOSITORY}:${IMAGE_TAG:-latest}

    restart: unless-stopped

    ports:

      # Only bind on localhost: Nginx proxies to this

      - "127.0.0.1:3000:3000"

    env_file:

      - .env.production

    depends_on:

      valkey:

        condition: service_started

      db:

        condition: service_healthy

volumes:

  db_data:

  valkey_data: