docker-compose.yml

version: '3.8'

services:
  # =============================================================================
  # PostgreSQL Database
  # =============================================================================
  postgres:
    image: postgres:16-alpine
    container_name: halolight-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: halolight_db
      POSTGRES_USER: halolight_user
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-halolight_password_change_me}
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - '5432:5432'
    networks:
      - halolight-network
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U halolight_user -d halolight_db']
      interval: 10s
      timeout: 5s
      retries: 5

  # =============================================================================
  # Redis (Optional - for caching)
  # =============================================================================
  redis:
    image: redis:7-alpine
    container_name: halolight-redis
    restart: unless-stopped
    command: redis-server --appendonly yes
    volumes:
      - redis_data:/data
    ports:
      - '6379:6379'
    networks:
      - halolight-network
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
      interval: 10s
      timeout: 3s
      retries: 5

  # =============================================================================
  # NestJS Application
  # =============================================================================
  app:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: halolight-api
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    environment:
      NODE_ENV: production
      PORT: 3000
      DATABASE_URL: postgresql://halolight_user:${POSTGRES_PASSWORD:-halolight_password_change_me}@postgres:5432/halolight_db?schema=public
      JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-key-min-32-characters-long}
      JWT_EXPIRES_IN: 7d
      JWT_REFRESH_SECRET: ${JWT_REFRESH_SECRET:-your-refresh-secret-min-32-chars}
      JWT_REFRESH_EXPIRES_IN: 30d
      REDIS_HOST: redis
      REDIS_PORT: 6379
      CORS_ORIGIN: ${CORS_ORIGIN:-http://localhost:3000}
    volumes:
      - ./uploads:/app/uploads
    ports:
      - '3000:3000'
    networks:
      - halolight-network
    healthcheck:
      test: ['CMD', 'node', '-e', "require('http').get('http://localhost:3000/health')"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 40s

networks:
  halolight-network:
    driver: bridge

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local