services:
  traefik:
    image: traefik:v3.7.1
    container_name: bee-task-traefik
    restart: unless-stopped

    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--log.level=DEBUG"
      - "--accesslog=true"

    ports:
      - "80:80"
      - "8080:8080"

    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro

    networks:
      - traefik-public

  postgres:
    image: postgres:16
    container_name: bee-task-postgres
    restart: unless-stopped

    environment:
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: ${POSTGRES_DB:-beetask}

    volumes:
      - postgres_data:/var/lib/postgresql/data

    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]
      interval: 10s
      timeout: 5s
      retries: 5

    networks:
      - traefik-public

  backend:
    image: ${BACKEND_IMAGE}
    restart: unless-stopped

    environment:
      DB_USER: ${POSTGRES_USER}
      DB_PASSWORD: ${POSTGRES_PASSWORD}
      DB_URL: ${DB_URL}
      MP_JWT_VERIFY_ISSUER: ${MP_JWT_VERIFY_ISSUER}
      SMALLRYE_JWT_SIGN_KEY: ${SMALLRYE_JWT_SIGN_KEY}
      MP_JWT_VERIFY_PUBLICKEY: ${MP_JWT_VERIFY_PUBLICKEY}

    depends_on:
      postgres:
        condition: service_healthy

    labels:
      - "traefik.enable=true"

      - "traefik.http.routers.backend.rule=PathPrefix(`/backend`)"
      - "traefik.http.routers.backend.entrypoints=web"

      - "traefik.http.middlewares.backend-strip.stripprefix.prefixes=/backend"
      - "traefik.http.routers.backend.middlewares=backend-strip"

      - "traefik.http.services.backend.loadbalancer.server.port=8081"

    networks:
      - traefik-public

  frontend:
    image: ${FRONTEND_IMAGE}
    restart: unless-stopped

    labels:
      - "traefik.enable=true"

      - "traefik.http.routers.frontend.rule=PathPrefix(`/`)"
      - "traefik.http.routers.frontend.entrypoints=web"

      - "traefik.http.services.frontend.loadbalancer.server.port=3000"

    networks:
      - traefik-public

volumes:
  postgres_data:

networks:
  traefik-public:
    driver: bridge