docker-compose.yml

services:
  app:
    build: .
    container_name: requirementstracker-app
    environment:
      - TZ=${TZ:-UTC}
      - ALLOW_SELF_REGISTER=${ALLOW_SELF_REGISTER:-true}
      - ADMIN_USERNAMES=${ADMIN_USERNAMES:-admin}
      - SECRET_KEY=${SECRET_KEY:-your-secret-key-change-this}
      - DATABASE_URL=postgresql+psycopg2://requirementstracker:requirementstracker@db:5432/requirementstracker
    ports:
      - "8080:8080"
    volumes:
      - app_data:/data
      - ./logs:/app/logs
    depends_on:
      - db
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  db:
    image: postgres:16-alpine
    container_name: requirementstracker-db
    environment:
      - POSTGRES_DB=${POSTGRES_DB:-requirementstracker}
      - POSTGRES_USER=${POSTGRES_USER:-requirementstracker}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-requirementstracker}
      - TZ=${TZ:-UTC}
    volumes:
      - db_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  # Optional reverse proxy for TLS on LAN
  proxy:
    image: caddy:2-alpine
    container_name: requirementstracker-proxy
    volumes:
      - ./docker/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - app
    restart: unless-stopped
    profiles:
      - tls

volumes:
  app_data:
    driver: local
  db_data:
    driver: local
  caddy_data:
    driver: local
  caddy_config:
    driver: local