---

services:
  # PostgreSQL Database
  # postgres:
  #   image: postgres:15-alpine
  #   container_name: tournament-postgres
  #   environment:
  #     POSTGRES_DB: tournament
  #     POSTGRES_USER: tournament_user
  #     POSTGRES_PASSWORD: tournament_password
  #   volumes:
  #     - postgres_data:/var/lib/postgresql/data
  #     - ./prisma/migrations:/docker-entrypoint-initdb.d
  #   ports:
  #     - "5432:5432"
  #   healthcheck:
  #     test: ["CMD-SHELL", "pg_isready -U tournament_user -d tournament"]
  #     interval: 10s
  #     timeout: 5s
  #     retries: 5
  #   networks:
  #     - tournament-network

  # Tournament Application
  tournament-app:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    container_name: tournament-app-prod
    environment:
      - DATABASE_URL=postgresql://admin:puW6KHfe3viQRyR7@sheldon:5432/tournament
      # - DATABASE_URL=postgresql://tournament_user:${POSTGRES_PASSWORD:-change_me_in_production}@postgres:5432/tournament
      - PORT=4000
      - JWT_SECRET=${JWT_SECRET:-change_me_in_production}
      - ADMIN_USERNAME=${ADMIN_USERNAME:-admin}
      - ADMIN_PASSWORD=${ADMIN_PASSWORD:-change_me_in_production}
      - ADMIN_EMAIL=${ADMIN_EMAIL:-admin@tournament.com}
      - NODE_ENV=production
    ports:
      - "127.0.0.1:4000:4000"  # Only accessible from localhost
    # depends_on:
    #   postgres:
    #     condition: service_healthy
    volumes:
      - ../prisma:/app/prisma
    networks:
      - tournament-network
    restart: unless-stopped
    # deploy:
    #   resources:
    #     limits:
    #       memory: 512M
    #       cpus: '0.5'
    #     reservations:
    #       memory: 256M
    #       cpus: '0.25'

  # Nginx Reverse Proxy
  nginx:
    image: nginx:alpine
    container_name: tournament-nginx-prod
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./ssl:/etc/nginx/ssl:ro
      - nginx_logs:/var/log/nginx
    depends_on:
      - tournament-app
    networks:
      - tournament-network
    restart: unless-stopped
    # deploy:
    #   resources:
    #     limits:
    #       memory: 128M
    #       cpus: '0.25'
    #     reservations:
    #       memory: 64M
    #       cpus: '0.1'

volumes:
  # postgres_data:
  #   driver: local
  nginx_logs:
    driver: local

networks:
  tournament-network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16