docker-compose-server.yaml

services:
  auth-service:
    container_name: ${AUTH_SERVICE_CONTAINER_NAME:-auth-service}
    # Use pre-built image from deploy script
    # To build and test: ./build-and-test.sh (Linux/Mac)
    # To deploy: ./deploy.sh server (Linux/Mac)
    image: ${FINAL_IMAGE_NAME:-auth-service:latest}
    volumes:
    - /var/run/docker.sock:/var/run/docker.sock 
    # No ports exposed - access via reverse proxy/load balancer
    environment:
      - DB_URL=${DB_URL:-jdbc:postgresql://db:5432/authenticationservice}
      - DB_USERNAME=${DB_USERNAME:-postgres}
      - DB_PASSWORD=${DB_PASSWORD:-postgres}
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET}
      - JWT_REFRESH_SECRET=${JWT_REFRESH_SECRET}
      - FRONTEND_URL=${FRONTEND_URL:-http://localhost:3000}
      - OAUTH2_REDIRECT_URI=${OAUTH2_REDIRECT_URI}
      - ADMIN_ENABLED=${ADMIN_ENABLED:-false}
      - ADMIN_EMAIL=${ADMIN_EMAIL}
      - ADMIN_USERNAME=${ADMIN_USERNAME}
      - MAIL_HOST=${MAIL_HOST}
      - MAIL_PORT=${MAIL_PORT:-587}
      - MAIL_USERNAME=${MAIL_USERNAME}
      - MAIL_PASSWORD=${MAIL_PASSWORD}
    env_file:
      - .env
    networks:
      - auth-network
    depends_on:
      db:
        condition: service_healthy
    restart: unless-stopped

  frontend:
    container_name: ${AUTH_FRONTEND_CONTAINER_NAME:-auth-frontend}
    image: ${FRONTEND_IMAGE_NAME:-auth-frontend:latest}
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        - VITE_API_URL=${VITE_API_URL:-http://localhost:8080}
    # No ports exposed - access via reverse proxy/load balancer
    networks:
      - auth-network
    depends_on:
      - auth-service
    restart: unless-stopped

  db:
    container_name: ${AUTH_DB_CONTAINER_NAME:-auth-db}
    image: postgres:17.5
    environment:
      - POSTGRES_DB=${POSTGRES_DB:-authenticationservice}
      - POSTGRES_USER=${DB_USERNAME:-postgres}
      - POSTGRES_PASSWORD=${DB_PASSWORD:-postgres}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    # No ports exposed - access only from internal network
    networks:
      - auth-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U \"$$POSTGRES_USER\" -d \"$$POSTGRES_DB\""]
      interval: 10s
      timeout: 5s
      retries: 5

networks:
  auth-network:
    driver: bridge

volumes:
  postgres_data: