docker-compose.yml

services:
  web:
    image: ujjwalkar/bizbuch-backend:latest
    container_name: bizbuch_backend
    restart: always
    command: >
      sh -c "
      python manage.py migrate &&
      python manage.py collectstatic --noinput &&
      daphne -b 0.0.0.0 -p 8000 --access-log - --verbosity 1 mysite.asgi:application
      "
    ports:
      - "8000:8000"   # ✅ only required exposed port
    environment:
      - DEBUG=True
      - OTP_VERIFICATION_ENABLED=False # Set to True to enable OTP verification
      - EMAIL_HOST_USER=your_email@example.com # Your email here
      - EMAIL_HOST_PASSWORD=your_email_password_here # Create app password from here https://myaccount.google.com/apppasswords

      # Postgres
      - DB_HOST=db
      - DB_PORT=5432
      - POSTGRES_DB=bizbuch
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=postgres

      # Redis
      - REDIS_HOST=redis

      # S3 (MinIO)
      - AWS_ACCESS_KEY_ID=bizbuch_admin
      - AWS_SECRET_ACCESS_KEY=bizbuch_secret_key
      - AWS_S3_ENDPOINT_URL=http://minio:9000
      - AWS_S3_BUCKET=bizbuch
      - AWS_DEFAULT_REGION=us-east-1
      - AWS_S3_USE_SSL=False

    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_started
      minio:
        condition: service_started
      minio_init:
        condition: service_completed_successfully
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.10

  db:
    image: postgres:15
    restart: always
    environment:
      POSTGRES_DB: bizbuch
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    # Optional: expose Postgres port only if needed for external access
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d bizbuch"]
      interval: 5s
      timeout: 3s
      retries: 20
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.11

  redis:
    image: redis:7-alpine
    restart: always
    # Optional: expose Redis port only if needed for external access
    # ports:
    #   - "6379:6379"
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.12

  redisinsight:
    image: redis/redisinsight:latest
    container_name: redisinsight
    restart: always
    ports:
      - "5540:5540"
    depends_on:
      - redis
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.17

  minio:
    image: minio/minio:latest
    container_name: minio
    restart: always
    environment:
      MINIO_ROOT_USER: bizbuch_admin
      MINIO_ROOT_PASSWORD: bizbuch_secret_key
    command: server /data --console-address ":9001"
    volumes:
      - minio_data:/data

    # Optional: expose MinIO ports only if needed for UI/debugging
    ports:
      - "9000:9000"
      - "9001:9001"
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.13

  minio_init:
    image: minio/mc:latest
    depends_on:
      - minio
    restart: "no"
    entrypoint: >
      /bin/sh -c "
      until (/usr/bin/mc alias set myminio http://minio:9000 bizbuch_admin bizbuch_secret_key) do sleep 2; done;
      /usr/bin/mc mb -p myminio/bizbuch || true;
      /usr/bin/mc anonymous set download myminio/bizbuch || true;
      exit 0;
      "
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.14

  pgadmin:
    image: dpage/pgadmin4:latest
    container_name: pgadmin
    restart: always
    environment:
      PGADMIN_DEFAULT_EMAIL: admin@admin.com
      PGADMIN_DEFAULT_PASSWORD: admin
      PGADMIN_CONFIG_SERVER_MODE: "False"
      PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED: "False"
    ports:
      - "5050:80"
    volumes:
      - ./pgadmin/servers.json:/pgadmin4/servers.json:ro
    depends_on:
      - db
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.16

  # Uncomment the following section to enable Cloudflare Tunnel
  tunnel:
    image: cloudflare/cloudflared:latest
    command: tunnel --no-autoupdate --url http://web:8000
    restart: always
    depends_on:
      - web
    networks:
      bizbuch_network:
        ipv4_address: 172.28.0.15

volumes:
  postgres_data:
  minio_data:

networks:
  bizbuch_network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.28.0.0/16
          gateway: 172.28.0.1