docker-compose.prod-local.yml

version: '3.8'

services:
  mongodb:
    image: mongo:7.0
    container_name: litecoin-mongodb-prod-local
    environment:
      # Only set init DB variables if MONGO_ROOT_PASSWORD is set
      # MongoDB requires both USERNAME and PASSWORD to be set together
      - MONGO_INITDB_ROOT_USERNAME=${MONGO_ROOT_USERNAME:-admin}
      - MONGO_INITDB_ROOT_PASSWORD=${MONGO_ROOT_PASSWORD:-}
    # Only enable --auth if MONGO_ROOT_PASSWORD is set
    # --bind_ip_all allows connections from other containers
    # Use entrypoint override to conditionally set/unset init DB vars
    entrypoint: >
      sh -c "
      if [ -n \"$$MONGO_ROOT_PASSWORD\" ]; then
        export MONGO_INITDB_ROOT_USERNAME=\"$${MONGO_ROOT_USERNAME:-admin}\";
        export MONGO_INITDB_ROOT_PASSWORD=\"$$MONGO_ROOT_PASSWORD\";
      else
        unset MONGO_INITDB_ROOT_USERNAME;
        unset MONGO_INITDB_ROOT_PASSWORD;
      fi;
      exec docker-entrypoint.sh mongod --bind_ip_all $${MONGO_ROOT_PASSWORD:+--auth}
      "
    ports:
      - "27017:27017"
    volumes:
      - mongodb_dev_data:/data/db
      # - mongodb_data:/data/db
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "if [ -n \"$$MONGO_ROOT_PASSWORD\" ]; then mongosh --quiet --username $$MONGO_ROOT_USERNAME --password $$MONGO_ROOT_PASSWORD --authenticationDatabase admin --eval \"db.adminCommand('ping')\"; else mongosh --quiet --eval \"db.adminCommand('ping')\"; fi"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 30s

  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: litecoin-backend-prod-local
    ports:
      - "8000:8000"
    env_file:
      - ./.env.prod-local
      - ./backend/.env
    environment:
      # Production-local-specific overrides
      # Note: GOOGLE_API_KEY is loaded from ./backend/.env via env_file above
      - NODE_ENV=production
      # Set MONGO_URI if not provided in .env.prod-local (uses Docker service name)
      - MONGO_URI=${MONGO_URI:-mongodb://mongodb:27017}
    depends_on:
      mongodb:
        condition: service_healthy
    volumes:
      - ./backend/monitoring/data:/app/backend/monitoring/data
    restart: unless-stopped
    networks:
      default:
        aliases:
          - litecoin-backend
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  payload_cms:
    build:
      context: ./payload_cms
      dockerfile: Dockerfile
    container_name: litecoin-payload-cms-prod-local
    ports:
      - "3001:3000"
    env_file:
      - ./.env.prod-local
      - ./payload_cms/.env
    environment:
      # Production-local-specific overrides
      # Note: PAYLOAD_SECRET is loaded from ./payload_cms/.env via env_file above
      - NODE_ENV=production
      # Set DATABASE_URI if not provided in .env.prod-local (uses Docker service name)
      - DATABASE_URI=${DATABASE_URI:-mongodb://mongodb:27017/payload_cms}
    depends_on:
      backend:
        condition: service_healthy
      mongodb:
        condition: service_healthy
    restart: unless-stopped
    networks:
      default:
        aliases:
          - litecoin-payload-cms
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3000', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        - NEXT_PUBLIC_BACKEND_URL=${NEXT_PUBLIC_BACKEND_URL:-http://localhost:8000}
        - NEXT_PUBLIC_PAYLOAD_URL=${NEXT_PUBLIC_PAYLOAD_URL:-http://localhost:3001}
    container_name: litecoin-frontend-prod-local
    ports:
      - "3000:3000"
    env_file:
      - ./.env.prod-local
    environment:
      # Production-local-specific overrides
      - NODE_ENV=production
    depends_on:
      backend:
        condition: service_healthy
    restart: unless-stopped
    networks:
      default:
        aliases:
          - litecoin-frontend
    healthcheck:
      test: ["CMD", "node", "-e", "const rawHost = process.env.HOST || process.env.HOSTNAME || '127.0.0.1'; const host = ['0.0.0.0', '::', '::0', '::ffff:0:0'].includes(rawHost) ? '127.0.0.1' : rawHost; require('http').get(`http://$${host}:3000/chat`, (r) => {process.exit(r.statusCode >= 200 && r.statusCode < 400 ? 0 : 1)}).on('error', () => process.exit(1))"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  prometheus:
    image: prom/prometheus:latest
    container_name: litecoin-prometheus-prod-local
    ports:
      - "9090:9090"
    volumes:
      - ./monitoring/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - ./monitoring/alerts.yml:/etc/prometheus/alerts.yml:ro
      - prometheus_data:/prometheus
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--storage.tsdb.path=/prometheus'
      - '--web.console.libraries=/usr/share/prometheus/console_libraries'
      - '--web.console.templates=/usr/share/prometheus/consoles'
      - '--storage.tsdb.retention.time=30d'
      - '--web.enable-lifecycle'
    restart: unless-stopped
    depends_on:
      backend:
        condition: service_healthy

  grafana:
    image: grafana/grafana:latest
    container_name: litecoin-grafana-prod-local
    ports:
      - "3002:3000"
    env_file:
      - ./.env.prod-local
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_ADMIN_USER:-admin}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_ADMIN_PASSWORD:?GRAFANA_ADMIN_PASSWORD must be set}
      - GF_USERS_ALLOW_SIGN_UP=false
    volumes:
      - grafana_data:/var/lib/grafana
      - ./monitoring/grafana/provisioning:/etc/grafana/provisioning
      - ./monitoring/grafana/dashboards:/var/lib/grafana/dashboards
    restart: unless-stopped
    depends_on:
      prometheus:
        condition: service_started

  cloudflared:
    image: cloudflare/cloudflared:latest
    container_name: litecoin-cloudflared-prod-local
    command: tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN}
    env_file:
      - ./.env.prod-local
    environment:
      - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
    depends_on:
      backend:
        condition: service_healthy
      payload_cms:
        condition: service_healthy
      frontend:
        condition: service_healthy
    restart: unless-stopped

  redis:
    image: redis:7-alpine
    container_name: litecoin-redis-prod-local
    # Only add --requirepass if REDIS_PASSWORD is set
    command: >
      sh -c "if [ -n \"$$REDIS_PASSWORD\" ]; then
        redis-server --requirepass $$REDIS_PASSWORD --save 60 1 --loglevel warning;
      else
        redis-server --save 60 1 --loglevel warning;
      fi"
    volumes:
      - redis_data:/data
    restart: unless-stopped

volumes:
  prometheus_data:
  grafana_data:
  mongodb_dev_data:
  redis_data: