services:
  postgres:
    image: docker.m.daocloud.io/library/postgres:16-bookworm
    restart: unless-stopped
    environment:
      TZ: ${TZ:-Asia/Shanghai}
      POSTGRES_DB: ${POSTGRES_DB:-order_site}
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
    healthcheck:
      test:
        [
          "CMD-SHELL",
          "pg_isready -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-order_site}",
        ]
      interval: 5s
      timeout: 5s
      retries: 20
    volumes:
      - postgres_data:/var/lib/postgresql/data

  ocr-worker:
    build:
      context: .
      dockerfile: deploy/docker/ocr-worker.Dockerfile
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "curl -fsS http://127.0.0.1:8100/health || exit 1"]
      interval: 5s
      timeout: 5s
      retries: 20
      start_period: 15s
    environment:
      TZ: ${TZ:-Asia/Shanghai}

  backend:
    build:
      context: .
      dockerfile: deploy/docker/backend.Dockerfile
    restart: unless-stopped
    env_file:
      - .env
    depends_on:
      postgres:
        condition: service_healthy
      ocr-worker:
        condition: service_healthy
    healthcheck:
      test:
        ["CMD-SHELL", "curl -fsS http://127.0.0.1:3000/health/ready || exit 1"]
      interval: 5s
      timeout: 5s
      retries: 20
      start_period: 20s
    environment:
      TZ: ${TZ:-Asia/Shanghai}
      PORT: ${BACKEND_PORT:-3000}
      DATABASE_URL: ${DATABASE_URL:-postgres://postgres:postgres@postgres:5432/order_site}
      DATABASE_SSL: ${DATABASE_SSL:-false}
      DATABASE_MAX_CONNECTIONS: ${DATABASE_MAX_CONNECTIONS:-20}
      OCR_BASE_URL: http://ocr-worker:8100
      CLAIM_BASE_URL: ${CLAIM_BASE_URL:-http://localhost/#/claim}
      TENCENT_REDEEM_PROOF_MODE: ${TENCENT_REDEEM_PROOF_MODE:-full}
      TENCENT_BROWSER_HEADLESS: ${TENCENT_BROWSER_HEADLESS:-true}
      TENCENT_BROWSER_PREWARM: ${TENCENT_BROWSER_PREWARM:-true}
      TENCENT_BROWSER_KEEP_ALIVE: ${TENCENT_BROWSER_KEEP_ALIVE:-true}
      TENCENT_SESSION_DEBUG: ${TENCENT_SESSION_DEBUG:-false}
      ADMIN_SESSION_SECRET: ${ADMIN_SESSION_SECRET}
      ADMIN_DEFAULT_USERS_JSON: ${ADMIN_DEFAULT_USERS_JSON}
      AGISO_APP_SECRET: ${AGISO_APP_SECRET:-}
      AGISO_MESSAGING_ENABLED: ${AGISO_MESSAGING_ENABLED:-false}
      AGISO_MESSAGE_APP_SECRET: ${AGISO_MESSAGE_APP_SECRET:-}
    volumes:
      - ./deploy/data/backend:/app/data

  web:
    build:
      context: .
      dockerfile: deploy/docker/frontend.Dockerfile
      args:
        APP_DOMAIN: ${APP_DOMAIN:-localhost}
    restart: unless-stopped
    depends_on:
      backend:
        condition: service_healthy
    ports:
      - "80:80"
      - "443:443"
    environment:
      TZ: ${TZ:-Asia/Shanghai}
      APP_DOMAIN: ${APP_DOMAIN:-localhost}
      CADDY_SITE_ADDR: ${CADDY_SITE_ADDR:-http://localhost}
    volumes:
      - caddy_data:/data
      - caddy_config:/config

volumes:
  postgres_data:
  caddy_data:
  caddy_config: