services:
    kutt_db:
        image: postgres:16-alpine
        restart: unless-stopped
        networks:
            - backend
        volumes:
            - /mnt/config/docker/kutt/postgres:/var/lib/postgresql/data
        environment:
            POSTGRES_USER: ${DB_USER:-kutt}
            POSTGRES_PASSWORD: ${DB_PASSWORD:?Set DB_PASSWORD}
            POSTGRES_DB: ${DB_NAME:-kutt}
        healthcheck:
            test:
                [
                    'CMD-SHELL',
                    'pg_isready -U ${DB_USER:-kutt} -d ${DB_NAME:-kutt}',
                ]
            interval: 10s
            timeout: 5s
            retries: 5

    kutt_redis:
        image: redis:7-alpine
        restart: unless-stopped
        networks:
            - backend
        volumes:
            - /mnt/config/docker/kutt/redis:/data
        command: redis-server --appendonly yes
        healthcheck:
            test: ['CMD', 'redis-cli', 'ping']
            interval: 10s
            timeout: 5s
            retries: 5

    kutt:
        image: kutt/kutt:latest
        restart: unless-stopped
        networks:
            - marina-net
            - backend
        depends_on:
            kutt_db:
                condition: service_healthy
            kutt_redis:
                condition: service_healthy
        healthcheck:
            test:
                [
                    'CMD-SHELL',
                    'node -e "require(''http'').get(''http://127.0.0.1:3000/'', (r) => { r.resume(); process.exit(r.statusCode >= 200 && r.statusCode < 500 ? 0 : 1); }).on(''error'', () => process.exit(1))"',
                ]
            interval: 30s
            timeout: 10s
            retries: 3
            start_period: 40s
        environment:
            DB_CLIENT: pg
            DB_HOST: kutt_db
            DB_PORT: '5432'
            DB_USER: ${DB_USER:-kutt}
            DB_PASSWORD: ${DB_PASSWORD:?Set DB_PASSWORD}
            DB_NAME: ${DB_NAME:-kutt}
            REDIS_ENABLED: 'true'
            REDIS_HOST: kutt_redis
            REDIS_PORT: '6379'
            DEFAULT_DOMAIN: mifi.me
            NODE_ENV: production
            JWT_SECRET: ${JWT_SECRET:?Set JWT_SECRET}
        labels:
            - 'traefik.enable=true'
            - 'docker.network=marina-net'
            - 'traefik.http.routers.kutt-mifi.rule=Host(`mifi.me`)'
            - 'traefik.http.routers.kutt-mifi.entrypoints=websecure'
            - 'traefik.http.routers.kutt-mifi.tls.certresolver=letsencrypt'
            - 'traefik.http.routers.kutt-mifi.service=kutt-short'
            - 'traefik.http.services.kutt-short.loadbalancer.server.port=3000'
            - 'traefik.http.services.kutt-short.loadbalancer.serversTransport=kutt-long-timeout@file'

    qr_api:
        build:
            context: ./qr-api
            dockerfile: Dockerfile
        container_name: qr_api
        restart: unless-stopped
        networks:
            - backend
        volumes:
            - /mnt/config/docker/qr/db:/data
            - /mnt/config/docker/qr/uploads:/uploads
        environment:
            PORT: '8080'
            DB_PATH: /data/db.sqlite
            UPLOADS_PATH: /uploads
            KUTT_API_KEY: ${KUTT_API_KEY:-}
            KUTT_BASE_URL: http://kutt:3000
            SHORT_DOMAIN: https://mifi.me
        healthcheck:
            test:
                [
                    'CMD',
                    'node',
                    '-e',
                    "require('http').get('http://127.0.0.1:8080/health', (r) => { r.resume(); process.exit(r.statusCode === 200 ? 0 : 1); }).on('error', () => process.exit(1))",
                ]
            interval: 10s
            timeout: 5s
            retries: 5
            start_period: 10s

    qr_web:
        build:
            context: ./qr-web
            dockerfile: Dockerfile
        restart: unless-stopped
        networks:
            - marina-net
            - backend
        depends_on:
            qr_api:
                condition: service_healthy
        environment:
            QR_API_URL: http://qr_api:8080
        healthcheck:
            test:
                - CMD
                - node
                - -e
                - 'require("http").get("http://localhost:3000/", {timeout: 5000}, (r) => { r.resume(); process.exit(r.statusCode >= 200 && r.statusCode < 500 ? 0 : 1); }).on("error", () => process.exit(1))'
            interval: 30s
            timeout: 10s
            retries: 3
            start_period: 15s
        labels:
            - 'traefik.enable=true'
            - 'docker.network=marina-net'
            - 'traefik.http.routers.qr-web.rule=Host(`qr.mifi.dev`)'
            - 'traefik.http.routers.qr-web.entrypoints=websecure'
            - 'traefik.http.routers.qr-web.tls.certresolver=letsencrypt'
            - 'traefik.http.routers.qr-web.service=qr-web'
            - 'traefik.http.routers.qr-web.middlewares=qr-web-basicauth'
            - 'traefik.http.middlewares.qr-web-basicauth.basicauth.users=mifi:$$2y$$05$$TS20fkfrmJ3MLc.cgfM6OcuowOstcy/2DTOq0YfirUDU3b0vtNz.'
            - 'traefik.http.services.qr-web.loadbalancer.server.port=3000'

networks:
    marina-net:
        external: true
    backend:
        driver: bridge