docker-compose.yml

services:
  db:
    image: postgres:17-alpine
    environment:
      POSTGRES_DB: ${DB_NAME}
      POSTGRES_USER: ${DB_USER}
      POSTGRES_PASSWORD: ${DB_PASSWORD}
    volumes:
      - db-data:/var/lib/postgresql/data
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U ${DB_USER} -d ${DB_NAME}" ]
      interval: 5s
      timeout: 5s
      retries: 5

  meilisearch:
    # NOTE: no healthcheck is configured here because the official meilisearch
    # image (since v1.6+) ships without wget/curl/nc, so the typical HTTP
    # healthcheck patterns cannot run inside the container. The backend uses
    # `condition: service_started` below and retries connections on bootstrap,
    # which keeps startup robust without a Docker-level healthcheck.
    image: getmeili/meilisearch:v1.10
    environment:
      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
      MEILI_ENV: ${MEILI_ENV:-production}
      MEILI_NO_ANALYTICS: "true"
    volumes:
      - meili-data:/meili_data

  backend:
    build: ./backend
    environment:
      SPRING_DATASOURCE_URL: jdbc:postgresql://db:5432/${DB_NAME}
      SPRING_DATASOURCE_USERNAME: ${DB_USER}
      SPRING_DATASOURCE_PASSWORD: ${DB_PASSWORD}
      OIDC_JWK_SET_URI: ${OIDC_JWK_SET_URI}
      TRANSLATION_API_URL: ${TRANSLATION_API_URL:-}
      TRANSLATION_API_KEY: ${TRANSLATION_API_KEY:-}
      TRANSLATION_MODEL: ${TRANSLATION_MODEL:-}
      MEILI_HOST: http://meilisearch:7700
      MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
      MEILI_INDEX_PREFIX: ${MEILI_INDEX_PREFIX:-crm_}
    depends_on:
      db:
        condition: service_healthy
      meilisearch:
        condition: service_started

  frontend:
    build: ./frontend
    environment:
      - BACKEND_URL=http://backend:8080
      - OIDC_ISSUER_URI=${OIDC_ISSUER_URI}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET}
      - AUTH_SECRET=${AUTH_SECRET}
      - AUTH_URL=${AUTH_URL}
      - AUTH_TRUST_HOST=true
    depends_on:
      - backend

  db-backup:
    build: ./scripts
    environment:
      DB_HOST: db
      DB_INTERNAL_PORT: 5432
      DB_NAME: ${DB_NAME}
      DB_USER: ${DB_USER}
      DB_PASSWORD: ${DB_PASSWORD}
      S3_BUCKET: ${S3_BUCKET}
      S3_ENDPOINT: ${S3_ENDPOINT}
      S3_PREFIX: ${S3_PREFIX:-backups}
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
      AWS_DEFAULT_REGION: ${AWS_DEFAULT_REGION:-eu-central-1}
      BACKUP_CRON: ${BACKUP_CRON:-0 2 * * *}
      BACKUP_RETENTION_DAYS: ${BACKUP_RETENTION_DAYS:-30}
    depends_on:
      - db

volumes:
  db-data:
  meili-data: