docker-compose.yml

services:
  postgres:
    image: postgres:16-alpine
    container_name: soeji-postgres
    environment:
      POSTGRES_USER: soeji
      POSTGRES_PASSWORD: soeji
      POSTGRES_DB: soeji
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U soeji"]
      interval: 10s
      timeout: 5s
      retries: 5

  rustfs:
    image: rustfs/rustfs:latest
    container_name: soeji-rustfs
    environment:
      - RUSTFS_VOLUMES
      - RUSTFS_ADDRESS
      - RUSTFS_CONSOLE_ADDRESS
      - RUSTFS_CONSOLE_ENABLE
      - RUSTFS_ACCESS_KEY
      - RUSTFS_SECRET_KEY
    ports:
      - "9000:9000"
      - "9001:9001"
    volumes:
      - rustfs_data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/health"]
      interval: 5s
      timeout: 3s
      retries: 10
      start_period: 40s

  rustfs-setup:
    image: minio/mc:latest
    container_name: soeji-rustfs-setup
    depends_on:
      rustfs:
        condition: service_healthy
    entrypoint: >
      /bin/sh -c "
      mc alias set myrustfs http://rustfs:9000 rustfsadmin rustfsadmin;
      mc mb myrustfs/soeji-images --ignore-existing;
      mc anonymous set public myrustfs/soeji-images;
      exit 0;
      "

  converter:
    build:
      context: .
      dockerfile: converter/Dockerfile
    container_name: soeji-converter
    ports:
      - "8000:8000"
    environment:
      - CONVERTER_PORT
      - S3_ENDPOINT
      - S3_ACCESS_KEY
      - S3_SECRET_KEY
      - S3_REGION
      - WEBP_DEFAULT_QUALITY
      - MAX_DIMENSION
      - RUST_LOG
    depends_on:
      rustfs:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "/soeji-converter", "-healthcheck"]
      interval: 10s
      timeout: 5s
      retries: 3
    restart: unless-stopped

  cdn:
    image: nginx:1.28
    container_name: soeji-cdn
    environment:
      # Backend URL for auth_request
      - BACKEND_URL
    volumes:
      - ./cdn/templates:/etc/nginx/templates:ro
      - cdn_cache:/var/cache/nginx
    ports:
      - "9080:80"
    depends_on:
      converter:
        condition: service_healthy
      backend:
        condition: service_started
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost/health"]
      interval: 10s
      timeout: 5s
      retries: 3
    restart: unless-stopped

  meilisearch:
    image: getmeili/meilisearch:v1.11
    container_name: soeji-meilisearch
    environment:
      MEILI_MASTER_KEY: masterKey
      MEILI_ENV: development
    ports:
      - "7700:7700"
    volumes:
      - meilisearch_data:/meili_data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:7700/health"]
      interval: 10s
      timeout: 5s
      retries: 5

  adminer:
    image: adminer:latest
    container_name: soeji-adminer
    ports:
      - "8081:8080"
    depends_on:
      postgres:
        condition: service_healthy

  frontend:
    build:
      context: .
      dockerfile: frontend/Dockerfile
      args:
        COMMIT_HASH: ${COMMIT_HASH:-unknown}
    container_name: soeji-frontend
    ports:
      - "8080:80"
    depends_on:
      - backend
    restart: unless-stopped

  migrate:
    build:
      context: .
      dockerfile: backend/Dockerfile.migrate
    container_name: soeji-migrate
    environment:
      DATABASE_URL: postgresql://soeji:soeji@postgres:5432/soeji
    depends_on:
      postgres:
        condition: service_healthy
    restart: "no"

  backend:
    build:
      context: .
      dockerfile: backend/Dockerfile
    container_name: soeji-backend
    environment:
      - DATABASE_URL
      - MEILISEARCH_HOST
      - MEILISEARCH_API_KEY
      - S3_ENDPOINT
      - S3_PUBLIC_ENDPOINT
      - S3_ACCESS_KEY
      - S3_SECRET_KEY
      - S3_BUCKET
      - S3_REGION
      - PORT=3000
      # Authentication settings
      - AUTH_ENABLED
      - JWT_SECRET
      - JWT_ACCESS_TOKEN_EXPIRES
      - JWT_REFRESH_TOKEN_EXPIRES_DAYS
      # Setup key for initial admin account creation (required for setup)
      - SETUP_KEY
      # Watcher API key for internal authentication
      - WATCHER_API_KEY
    depends_on:
      postgres:
        condition: service_healthy
      meilisearch:
        condition: service_healthy
      rustfs-setup:
        condition: service_completed_successfully
      migrate:
        condition: service_completed_successfully
    restart: unless-stopped

  watcher:
    build:
      context: .
      dockerfile: watcher/Dockerfile
    container_name: soeji-watcher
    environment:
      - BACKEND_URL=http://backend:3000
      - WATCHER_API_KEY
      - DELETE_AFTER_PROCESS=true
      - WATCH_DIR=/data/images
    volumes:
      - watch_data:/data/images
    depends_on:
      backend:
        condition: service_started
    restart: unless-stopped

  samba:
    image: dperson/samba
    container_name: soeji-samba
    environment:
      TZ: Asia/Tokyo
      USERID: "1000"
      GROUPID: "1000"
    command: >
      -u "soeji;soeji"
      -s "images;/data/images;yes;no;no;soeji;soeji"
      -g "server min protocol = SMB2"
      -g "server max protocol = SMB3"
      -g "client min protocol = SMB2"
      -g "ea support = yes"
      -g "vfs objects = fruit streams_xattr"
      -g "fruit:metadata = stream"
      -g "fruit:model = MacSamba"
      -g "fruit:posix_rename = yes"
      -g "fruit:veto_appledouble = no"
      -g "fruit:wipe_intentionally_left_blank_rfork = yes"
      -g "fruit:delete_empty_adfiles = yes"
    ports:
      - "137:137/udp"
      - "138:138/udp"
      - "139:139"
      - "445:445"
    volumes:
      - watch_data:/data/images
    restart: unless-stopped

volumes:
  watch_data:
  postgres_data:
  rustfs_data:
  meilisearch_data:
  cdn_cache: