docker-compose.yml

services:
  postgres:
    image: pgvector/pgvector:pg15
    environment:
      POSTGRES_USER: clinical_ai
      POSTGRES_PASSWORD: clinical_ai_password
      POSTGRES_DB: clinical_ai_db
    ports:
      # Host 5433 — 5432 may be taken by other local projects.
      - "5433:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U clinical_ai -d clinical_ai_db"]
      interval: 5s
      timeout: 5s
      retries: 10

  api:
    build: .
    ports:
      - "8000:8000"
    environment:
      DATABASE_URL: postgresql+asyncpg://clinical_ai:clinical_ai_password@postgres:5432/clinical_ai_db
      ENVIRONMENT: ${ENVIRONMENT:-development}
      JWT_SECRET: ${JWT_SECRET:?JWT_SECRET is required — generate one with `openssl rand -hex 32`}
      # LLM — Google Gemini API. PHI leaves the machine once this is set;
      # see README's privacy notice.
      GEMINI_API_KEY: ${GEMINI_API_KEY:-}
      GEMINI_MODEL: ${GEMINI_MODEL:-gemini-2.5-flash}
      DEBUG: "false"
    healthcheck:
      # urllib instead of curl — the slim python base image has no curl.
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health', timeout=3)"]
      interval: 15s
      timeout: 5s
      retries: 5
      start_period: 20s
    depends_on:
      postgres:
        condition: service_healthy

volumes:
  postgres_data: