docker-compose.yml

name: automation-platform
services:
  # ─────────────────── PostgreSQL ───────────────────
  database:
    container_name: ${POSTGRES_CONTAINER_NAME:-database}
    image: postgres:18
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-nestjs}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-nestjs_password}
      POSTGRES_DB: ${POSTGRES_DB:-nestjs_demo}
      # 额外创建一个 shadow 数据库供 Prisma Migrate 使用
      POSTGRES_MULTIPLE_DATABASES: ${POSTGRES_DB:-nestjs_demo_shadow}
    volumes:
      - postgres_data:/var/lib/postgresql
    ports:
      - '${POSTGRES_PORT:-5432}:5432'
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U ${POSTGRES_USER:-nestjs} -d ${POSTGRES_DB:-nestjs_demo}']
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s
    networks:
      - app_network

  # ─────────────────── NestJS App ───────────────────
  backend:
    container_name: ${APP_CONTAINER_NAME:-backend}
    build:
      context: .
      dockerfile: Dockerfile
      args:
        NODE_ENV: ${NODE_ENV:-development}
        APP_NAME: ${APP_NAME:-automation-platform}
        APP_VERSION: ${APP_VERSION:-latest}
    restart: unless-stopped
    depends_on:
      database:
        condition: service_healthy
      valkey:
        condition: service_started
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      # DATABASE_URL 需要指向 Compose 内部服务名，覆盖加密文件中的值
      DATABASE_URL: postgresql://${POSTGRES_USER:-nestjs}:${POSTGRES_PASSWORD:-nestjs_password}@database:5432/${POSTGRES_DB:-nestjs_demo}?schema=public
      SHADOW_DATABASE_URL: postgresql://${POSTGRES_USER:-nestjs}:${POSTGRES_PASSWORD:-nestjs_password}@database:5432/${POSTGRES_DB:-nestjs_demo_shadow}?schema=public
      VALKEY_HOST: valkey
      VALKEY_PORT: 6379
    volumes:
      # .env.keys 提供 dotenvx 解密私钥，其余所有配置由解密后的 .env.{NODE_ENV} 文件注入
      - type: bind
        source: ./.env.keys
        target: /app/.env.keys
        read_only: true
    ports:
      - '${BACKEND_PORT:-3000}:3000'
    healthcheck:
      test: ['CMD-SHELL', 'curl --fail http://backend:3000/health']
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s
    networks:
      - app_network

  valkey:
    container_name: ${VALKEY_CONTAINER_NAME:-valkey}
    image: valkey/valkey:8-alpine
    restart: unless-stopped
    ports:
      - '${VALKEY_PORT:-6379}:6379'
    volumes:
      - valkey_data:/data
    networks:
      - app_network

  # ─────────────────── Dashboard ───────────────────
  dashboard:
    container_name: ${DASHBOARD_CONTAINER_NAME:-dashboard}
    build:
      context: ./dashboard
      dockerfile: Dockerfile
    restart: unless-stopped
    depends_on:
      backend:
        condition: service_healthy
    ports:
      - '${DASHBOARD_PORT:-4000}:80'
    networks:
      - app_network

volumes:
  postgres_data:
  valkey_data:

networks:
  app_network:
    driver: bridge