docker-compose.yml

services:
  # ── Database tier ────────────────────────────────────────────────
  # Default: postgres:15-alpine. The HeliosDB-Nano migration is gated on
  # upstream fixes for the bugs listed in docs/heliosdb-bugs.md
  # (information_schema missing, scram/password auth broken,
  #  CREATE DATABASE not supported). Compose keeps both definitions; flip
  # the app's DB_HOST to switch.
  postgres:
    image: postgres:15-alpine
    container_name: claude-dashboard-db
    restart: unless-stopped
    environment:
      POSTGRES_DB: claude_dashboard
      POSTGRES_USER: claude
      POSTGRES_PASSWORD: ${DB_PASSWORD:-claude_secure_pw_2024}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./infrastructure/init-db.sql:/docker-entrypoint-initdb.d/init.sql
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U claude"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - internal

  # HeliosDB-Nano (preview, gated on bug fixes). Kept here so once the
  # information_schema gap is closed, switching is one DB_HOST change.
  heliosdb:
    image: heliosdb-nano-v2:latest
    container_name: claude-dashboard-heliosdb
    profiles: ["heliosdb"]   # only starts when explicitly enabled
    restart: unless-stopped
    command:
      - start
      - --data-dir=/data
      - --listen=0.0.0.0
      - --port=5432
      - --auth=trust
    environment:
      HELIOSDB_DATA_DIR: /data
      HELIOSDB_LOG_LEVEL: info
      RUST_BACKTRACE: "1"
    volumes:
      - heliosdb_data:/data
    networks:
      - internal

  redis:
    image: redis:7-alpine
    container_name: claude-dashboard-redis
    restart: unless-stopped
    volumes:
      - redis_data:/data
    command: redis-server --appendonly yes
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5
    networks:
      - internal

  app:
    build: .
    container_name: claude-dashboard
    restart: unless-stopped
    environment:
      NODE_ENV: production
      PORT: "5000"
      DB_HOST: postgres
      DB_PORT: "5432"
      DB_NAME: claude_dashboard
      DB_USER: claude
      DB_PASSWORD: ${DB_PASSWORD:-claude_secure_pw_2024}
      REDIS_HOST: redis
      REDIS_PORT: "6379"
      JWT_SECRET: ${JWT_SECRET:-change_this_jwt_secret_in_production}
      JWT_REFRESH_SECRET: ${JWT_REFRESH_SECRET:-change_this_refresh_secret_in_production}
      CB_API_URL: http://host.docker.internal:3848
      CB_API_KEY: ${CB_API_KEY:-}
      SPEECHMATICS_API_KEY: ${SPEECHMATICS_API_KEY:-}
      PROJECTS_BASE_PATH: /app/projects
      # Tmux integration: socket lives at /tmp/tmux-1001/default on the host.
      TMUX_SOCKET: /tmp/tmux-1001/default
      TMUX_HOST_UID: "1001"
    volumes:
      - ${PROJECTS_PATH:-./projects}:/app/projects
      - /tmp/tmux-1001:/tmp/tmux-1001
      - ./scripts:/app/scripts:ro
    extra_hosts:
      - "host.docker.internal:host-gateway"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    networks:
      - internal
      - management-network

volumes:
  heliosdb_data:
  redis_data:
  # Legacy — kept until the old Postgres container is decommissioned.
  postgres_data:

networks:
  internal:
    driver: bridge
  management-network:
    external: true