version: '3.9'

x-restart: &restart-stopped
  restart: unless-stopped

services:
  reactive-resume:
    image: amruthpillai/reactive-resume:${REACTIVE_RESUME_SERVER_IMAGE_VERSION:-latest}
    security_opt:
      - no-new-privileges:true
    restart: always
    depends_on:
      - postgres
      - redis
      - chrome
    environment:
      TZ: ${REACTIVE_RESUME_TZ:-UTC}
      NODE_ENV: ${REACTIVE_RESUME_NODE_ENV:-production}
      PUBLIC_URL: ${REACTIVE_RESUME_PUBLIC_URL:-http://localhost:3000}
      DATABASE_URL: ${REACTIVE_RESUME_DATABASE_URL:?}
      ACCESS_TOKEN_SECRET: ${REACTIVE_RESUME_ACCESS_TOKEN_SECRET:?}
      REFRESH_TOKEN_SECRET: ${REACTIVE_RESUME_REFRESH_TOKEN_SECRET:?}
      CHROME_TOKEN: ${BROWSERLESS_CHROME_TOKEN:?}
      CHROME_URL: ${REACTIVE_RESUME_CHROME_URL:-ws://chrome:3000}
      MAIL_FROM: ${REACTIVE_RESUME_MAIL_FROM:-noreploy@${APP_DOMAIN}}
      SMTP_URL: ${REACTIVE_RESUME_SMTP_URL:-smtp://null}
      STORAGE_URL: ${REACTIVE_RESUME_STORAGE_URL:-http://localhost:${REACTIVE_RESUME_STORAGE_PORT:-9000}/${STORAGE_BUCKET:-default}}
      STORAGE_ENDPOINT: ${REACTIVE_RESUME_STORAGE_ENDPOINT:-}
      STORAGE_PORT: ${REACTIVE_RESUME_STORAGE_PORT:-}
      STORAGE_REGION: ${REACTIVE_RESUME_STORAGE_REGION:-}
      STORAGE_BUCKET: ${REACTIVE_RESUME_STORAGE_BUCKET:-default}
      STORAGE_ACCESS_KEY: ${REACTIVE_RESUME_STORAGE_ACCESS_KEY:-}
      STORAGE_SECRET_KEY: ${REACTIVE_RESUME_STORAGE_SECRET_KEY:-}
      STORAGE_USE_SSL: ${REACTIVE_RESUME_STORAGE_USE_SSL:-false}
      STORAGE_SKIP_CREATE_BUCKET: ${REACTIVE_RESUME_STORAGE_SKIP_CREATE_BUCKET:-false}
      REDIS_URL: ${REACTIVE_RESUME_REDIS_URL:?}
      CROWDIN_PROJECT_ID: ${REACTIVE_RESUME_CROWDIN_PROJECT_ID:-}
      CROWDIN_PERSONAL_TOKEN: ${REACTIVE_RESUME_CROWDIN_PERSONAL_TOKEN:-}
      DISABLE_EMAIL_AUTH: ${REACTIVE_RESUME_DISABLE_EMAIL_AUTH:-true}
      VITE_DISABLE_SIGNUPS: ${REACTIVE_RESUME_VITE_DISABLE_SIGNUPS:-true}
      GITHUB_CLIENT_ID: ${REACTIVE_RESUME_GITHUB_CLIENT_ID:-}
      GITHUB_CLIENT_SECRET: ${REACTIVE_RESUME_GITHUB_CLIENT_SECRET:-}
      GITHUB_CALLBACK_URL: ${REACTIVE_RESUME_GITHUB_CALLBACK_URL:-http://localhost:5173/api/auth/github/callback}
      GOOGLE_CLIENT_ID: ${REACTIVE_RESUME_GOOGLE_CLIENT_ID:-}
      GOOGLE_CLIENT_SECRET: ${REACTIVE_RESUME_GOOGLE_CLIENT_SECRET:-}
      GOOGLE_CALLBACK_URL: ${REACTIVE_RESUME_GOOGLE_CALLBACK_URL:-http://localhost:5173/api/auth/google/callback}
    labels:
      traefik.enable: true
      traefik.docker.network: proxy
      traefik.http.routers.reactive-resume.tls: true
      traefik.http.routers.reactive-resume.entrypoints: websecure
      traefik.http.routers.reactive-resume.rule: Host(`resume.${APP_DOMAIN}`)
      traefik.http.routers.reactive-resume.service: reactive-resume
      traefik.http.services.reactive-resume.loadbalancer.server.port: 3000
      # Bypass `/artboard` route for chrome container to generate previews and PDFs (and builder in UI)
      traefik.http.routers.reactive-resume-bypass.tls: true
      traefik.http.routers.reactive-resume-bypass.entrypoints: websecure
      traefik.http.routers.reactive-resume-bypass.rule: Host(`resume.${APP_DOMAIN}`) && PathPrefix(`/artboard`)
      traefik.http.routers.reactive-resume-bypass.service: reactive-resume-bypass
      traefik.http.services.reactive-resume-bypass.loadbalancer.server.port: 3000
    networks:
      - reactive-resume
      - proxy

  chrome:
    image: browserless/chrome:${BROWSERLESS_CHROME_IMAGE_VERSION}
    <<: [*restart-stopped]
    environment:
      TOKEN: ${BROWSERLESS_CHROME_TOKEN:?}
      EXIT_ON_HEALTH_FAILURE: ${BROWSERLESS_EXIT_ON_HEALTH_FAILURE:-true}
      PRE_REQUEST_HEALTH_CHECK: ${BROWSERLESS_PRE_REQUEST_HEALTH_CHECK:-true}
      DEFAULT_IGNORE_HTTPS_ERRORS: ${DEFAULT_IGNORE_HTTPS_ERRORS:-true}
    networks:
      - reactive-resume

  redis:
    image: redis:${REDIS_IMAGE_VERSION}
    command: redis-server --requirepass ${REDIS_PASSWORD}
    <<: [*restart-stopped]
    environment:
      REDISCLI_AUTH: ${REDIS_PASSWORD}
    networks:
      - reactive-resume

  postgres:
    image: postgres:${POSTGRES_IMAGE_VERSION}
    <<: [*restart-stopped]
    environment:
      POSTGRES_DB: ${POSTGRES_DATABASE}
      POSTGRES_USER: ${POSTGRES_USER}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    volumes:
      - postgres:/var/lib/postgresql/data
    networks:
      - reactive-resume

  wait:
    image: waisbrot/wait
    environment:
      TARGETS: postgres:5432 redis:6379 chrome:3000 reactive-resume:3000
      TIMEOUT: 60
    networks:
      - reactive-resume

volumes:
  postgres:
    driver: local

networks:
  reactive-resume:
    driver: bridge
  proxy:
    external: true

version: "3.8"

services:
  postgres:
    image: postgres:alpine
    restart: always
    ports:
      - 5432:5432
    volumes:
      - ./pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      start_period: 15s
      interval: 30s
      timeout: 30s
      retries: 3
    environment:
      - POSTGRES_DB=postgres
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=secure_password

  server:
    image: amruthpillai/reactive-resume:server-3.8.4
    restart: always
    ports:
      - 3100:3100
    volumes:
      - ./assets/exports:/app/server/dist/assets/exports
      - ./assets/uploads:/app/server/dist/assets/uploads
    depends_on:
      - postgres
    environment:
      - PUBLIC_URL=http://localhost:3000
      - PUBLIC_SERVER_URL=http://localhost:3100/api
      - POSTGRES_DB=postgres
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD=secure_password
      - SECRET_KEY=secure_key_password
      - POSTGRES_HOST=postgres
      - POSTGRES_PORT=5432
      - JWT_SECRET=secure_jwt_password
      - JWT_EXPIRY_TIME=604800
      - STORAGE_S3_ENABLED=false
      - MAIL_FROM_NAME=Reactive Resume
      - MAIL_FROM_EMAIL=noreply@example.com
      - MAIL_HOST=mail.example.com
      - MAIL_PORT=587
      - MAIL_USERNAME=noreply@example.com
      - MAIL_PASSWORD=secure_mail_password
      - PDF_DELETION_TIME=10800

      
  client:
    image: amruthpillai/reactive-resume:client-3.8.4
    restart: always
    ports:
      - 3000:3000
    depends_on:
      - server
    environment:
      - PUBLIC_URL=http://localhost:3000
      - PUBLIC_SERVER_URL=http://localhost:3100/api
      
volumes:
  pgdata:
  exports:
  uploads: