services:
  caddy:
    image: caddy:2
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
      - "443:443/udp"
    environment:
      DOMAIN: ${DOMAIN:-trails.cool}
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config
    depends_on:
      - journal
      - planner

  journal:
    image: ghcr.io/trails-cool/journal:latest
    restart: unless-stopped
    environment:
      DOMAIN: ${DOMAIN:-trails.cool}
      ORIGIN: https://${DOMAIN:-trails.cool}
      PLANNER_URL: https://planner.${DOMAIN:-trails.cool}
      DATABASE_URL: postgres://trails:${POSTGRES_PASSWORD:-trails}@postgres:5432/trails
      JWT_SECRET: ${JWT_SECRET:-change-me-in-production}
      SESSION_SECRET: ${SESSION_SECRET:-change-me-in-production}
      NODE_ENV: production
      PORT: 3000
      SENTRY_RELEASE: ${SENTRY_RELEASE:-}
      SMTP_URL: ${SMTP_URL:-}
      SMTP_FROM: ${SMTP_FROM:-trails.cool <noreply@trails.cool>}
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:3000/api/health || exit 1"]
      interval: 15s
      timeout: 5s
      retries: 3
    depends_on:
      postgres:
        condition: service_healthy

  planner:
    image: ghcr.io/trails-cool/planner:latest
    restart: unless-stopped
    environment:
      BROUTER_URL: http://brouter:17777
      DATABASE_URL: postgres://trails:${POSTGRES_PASSWORD:-trails}@postgres:5432/trails
      NODE_ENV: production
      PORT: 3001
      SENTRY_RELEASE: ${SENTRY_RELEASE:-}
    healthcheck:
      test: ["CMD-SHELL", "curl -sf http://localhost:3001/health || exit 1"]
      interval: 15s
      timeout: 5s
      retries: 3
    depends_on:
      postgres:
        condition: service_healthy
      brouter:
        condition: service_started

  brouter:
    image: ghcr.io/trails-cool/brouter:latest
    restart: unless-stopped
    volumes:
      - ./segments:/data/segments
    # Segments can be pulled from:
    # - https://brouter.de/brouter/segments4/ (official, weekly updates)
    # - A trails.cool CDN mirror (later)

  postgres:
    image: postgis/postgis:16-3.4
    restart: unless-stopped
    environment:
      POSTGRES_USER: trails
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-trails}
      POSTGRES_DB: trails
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U trails"]
      interval: 5s
      timeout: 5s
      retries: 5

  prometheus:
    image: prom/prometheus:latest
    restart: unless-stopped
    volumes:
      - ./prometheus/prometheus.yml:/etc/prometheus/prometheus.yml:ro
      - prometheus_data:/prometheus
    command:
      - "--config.file=/etc/prometheus/prometheus.yml"
      - "--storage.tsdb.retention.time=15d"
      - "--storage.tsdb.retention.size=1GB"

  loki:
    image: grafana/loki:latest
    restart: unless-stopped
    volumes:
      - ./loki/loki-config.yml:/etc/loki/local-config.yaml:ro
      - loki_data:/loki
    command: ["-config.file=/etc/loki/local-config.yaml"]

  grafana:
    image: grafana/grafana:latest
    restart: unless-stopped
    environment:
      GF_SERVER_ROOT_URL: https://grafana.internal.${DOMAIN:-trails.cool}
      GF_AUTH_GITHUB_ENABLED: "true"
      GF_AUTH_GITHUB_CLIENT_ID: ${GF_AUTH_GITHUB_CLIENT_ID:-}
      GF_AUTH_GITHUB_CLIENT_SECRET: ${GF_AUTH_GITHUB_CLIENT_SECRET:-}
      GF_AUTH_GITHUB_ALLOWED_ORGANIZATIONS: trails-cool
      GF_AUTH_GITHUB_SCOPES: user:email,read:org
      GF_AUTH_DISABLE_LOGIN_FORM: "true"
    volumes:
      - ./grafana/provisioning:/etc/grafana/provisioning:ro
      - ./grafana/dashboards:/var/lib/grafana/dashboards:ro
      - grafana_data:/var/lib/grafana
    depends_on:
      - prometheus
      - loki

  # garage:
  #   image: dxflrs/garage:v1.0
  #   restart: unless-stopped
  #   volumes:
  #     - garage_data:/var/lib/garage
  #     - ./garage.toml:/etc/garage.toml:ro

volumes:
  caddy_data:
  caddy_config:
  pgdata:
  prometheus_data:
  loki_data:
  grafana_data: