docker-compose.yml

services:
  # ── App database ─────────────────────────────────────────────────────────────
  app-db:
    image: postgres:17-alpine
    environment:
      POSTGRES_DB:       ${DB_NAME:-exam_platform}
      POSTGRES_USER:     ${DB_USERNAME:-postgres}
      POSTGRES_PASSWORD: ${DB_PASSWORD:?DB_PASSWORD is required}
    volumes:
      - app-db-data:/var/lib/postgresql/data
    networks:
      - app-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USERNAME:-postgres} -d ${DB_NAME:-exam_platform}"]
      interval: 5s
      timeout: 5s
      retries: 10
      start_period: 10s

  # ── Application (NestJS + built Vue) ─────────────────────────────────────────
  app:
    build: .
    ports:
      - "${PORT:-3000}:3000"
    environment:
      NODE_ENV:        production
      PORT:            3000
      DB_HOST:         app-db
      DB_PORT:         5432
      DB_USERNAME:     ${DB_USERNAME:-postgres}
      DB_PASSWORD:     ${DB_PASSWORD:?DB_PASSWORD is required}
      DB_NAME:         ${DB_NAME:-exam_platform}
      JWT_SECRET:      ${JWT_SECRET:?JWT_SECRET is required}
      JWT_EXPIRES_IN:  ${JWT_EXPIRES_IN:-21600}
      JUDGE0_URL:      ${JUDGE0_URL:-http://judge0-server:2358}
      ADMIN_SETUP_KEY: ${ADMIN_SETUP_KEY:?ADMIN_SETUP_KEY is required}
      CORS_ORIGIN:     ${CORS_ORIGIN:-}
    depends_on:
      app-db:
        condition: service_healthy
    networks:
      - app-network
      - judge0-network
    restart: unless-stopped

  # ── Judge0 ────────────────────────────────────────────────────────────────────
  judge0-server:
    image: judge0/judge0:1.13.1
    privileged: true
    env_file: judge0/judge0.conf
    depends_on:
      - judge0-db
      - judge0-redis
    networks:
      - judge0-network
    restart: unless-stopped

  judge0-worker:
    image: judge0/judge0:1.13.1
    command: ["./scripts/workers"]
    privileged: true
    env_file: judge0/judge0.conf
    depends_on:
      - judge0-db
      - judge0-redis
    networks:
      - judge0-network
    restart: unless-stopped

  # postgres:16 - Judge0 1.13.1 is not tested against postgres 17
  judge0-db:
    image: postgres:16-alpine
    environment:
      POSTGRES_DB:       judge0
      POSTGRES_USER:     judge0
      # Must match POSTGRES_PASSWORD in judge0/judge0.conf
      POSTGRES_PASSWORD: judge0
    volumes:
      - judge0-db-data:/var/lib/postgresql/data
    networks:
      - judge0-network
    restart: unless-stopped

  judge0-redis:
    image: redis:7.2.4-alpine
    networks:
      - judge0-network
    restart: unless-stopped

networks:
  app-network:
  judge0-network:

volumes:
  app-db-data:
  judge0-db-data: