docker-compose.yml

services:
  app:
    image: ${DOCKERHUB_IMAGE:-dykkim/muneo}:${IMAGE_TAG:-latest}
    container_name: muneo-app
    restart: unless-stopped
    expose:
      - "8080"
    environment:
      SPRING_PROFILES_ACTIVE: ${SPRING_PROFILES_ACTIVE}
      SERVER_PORT: ${SERVER_PORT:-8080}
      SERVER_FORWARD_HEADERS_STRATEGY: framework
      REDIS_HOST: redis
      REDIS_PORT: 6379
      REDIS_PASSWORD: ${REDIS_PASSWORD:-redis1234}
      JWT_SECRET: ${JWT_SECRET}
      JWT_ACCESS_TOKEN_EXPIRATION: ${JWT_ACCESS_TOKEN_EXPIRATION:-3600}
      JWT_REFRESH_TOKEN_EXPIRATION: ${JWT_REFRESH_TOKEN_EXPIRATION:-1209600}
      AI_API_BASE_URL: ${AI_API_BASE_URL}
      AI_API_CONNECT_TIMEOUT_MS: ${AI_API_CONNECT_TIMEOUT_MS:-5000}
      AI_API_READ_TIMEOUT_MS: ${AI_API_READ_TIMEOUT_MS:-120000}
      KAKAO_CLIENT_ID: ${KAKAO_CLIENT_ID}
      KAKAO_CLIENT_SECRET: ${KAKAO_CLIENT_SECRET}
      OAUTH_FRONTEND_SUCCESS_URI: ${OAUTH_FRONTEND_SUCCESS_URI}
      OAUTH_FRONTEND_SIGNUP_URI: ${OAUTH_FRONTEND_SIGNUP_URI}
      OAUTH_FRONTEND_FAILURE_URI: ${OAUTH_FRONTEND_FAILURE_URI}
      OAUTH_KAKAO_LOGIN_URL: ${OAUTH_KAKAO_LOGIN_URL}
      CORS_ALLOWED_ORIGINS: ${CORS_ALLOWED_ORIGINS}
      COOKIE_SAME_SITE: ${COOKIE_SAME_SITE:-Lax}
      COOKIE_DOMAIN: ${COOKIE_DOMAIN:-}
      COOKIE_SECURE: ${COOKIE_SECURE}
      EMAIL_FEATURE_ENABLED: ${EMAIL_FEATURE_ENABLED:-false}
      PROD_DB_URL: ${PROD_DB_URL}
      PROD_DB_USERNAME: ${PROD_DB_USERNAME}
      PROD_DB_PASSWORD: ${PROD_DB_PASSWORD}
      DDL_AUTO: ${DDL_AUTO:-validate}
    depends_on:
      redis:
        condition: service_healthy
    networks:
      - muneo-net

  redis:
    image: redis:7-alpine
    container_name: muneo-redis
    restart: unless-stopped
    command: >
      sh -c "redis-server --appendonly yes
      --requirepass '${REDIS_PASSWORD:-redis1234}'"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD-SHELL", "redis-cli -a '${REDIS_PASSWORD:-redis1234}' ping | grep PONG"]
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 5s
    networks:
      - muneo-net

  nginx:
    image: nginx:1.27-alpine
    container_name: muneo-nginx
    restart: unless-stopped
    depends_on:
      app:
        condition: service_started
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/conf.d:/etc/nginx/conf.d:ro
      - ./certs:/etc/nginx/certs:ro
    networks:
      - muneo-net

volumes:
  redis-data:

networks:
  muneo-net:
    name: muneo-shared-net
    driver: bridge