plumio

version: '3.8'

services:
  plumio:
    image: ghcr.io/albertasaftei/plumio:latest
    container_name: plumio
    restart: unless-stopped
    ports:
      - "3000:3000"   # Frontend
      - "3001:3001"   # Backend API
    environment:
      - NODE_ENV=production
      - BACKEND_INTERNAL_PORT=3001
      - DOCUMENTS_PATH=/data/documents
      - DB_PATH=/data/plumio.db
      - JWT_SECRET=${JWT_SECRET}
      - ENCRYPTION_KEY=${ENCRYPTION_KEY}
      - ALLOWED_ORIGINS=http://${FRONTEND_URL}:${FRONTEND_PORT}
      - ENABLE_ENCRYPTION=true
      - SMTP_HOST=${SMTP_HOST}
      - SMTP_PORT=${SMTP_PORT}
      - SMTP_USER=${SMTP_USER}
      - SMTP_PASS=${SMTP_PASS}
      - SMTP_FROM=${SMTP_FROM}
      - APP_URL=${APP_URL}
    volumes:
      - plumio-data:/data
    networks:
      - plumio-network
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3001/api/health"]
      interval: 5m
      timeout: 10s
      retries: 3
      start_period: 40s
    deploy:
      resources:
        limits:
          memory: 1G
        reservations:
          memory: 512M

  # Automated backup service (optional - requires --profile backup)
  # backup:
  #   image: alpine:latest
  #   container_name: plumio-backup
  #   restart: unless-stopped
  #   profiles:
  #     - backup
  #   volumes:
  #     - plumio-data:/data:ro  # Read-only access to data
  #     - ./backups:/backups    # Backup destination
  #     - ./backup.sh:/backup.sh  # Backup script (read-write for chmod)
  #   environment:
  #     - BACKUP_RETENTION=7    # Keep backups for 7 days
  #     - BACKUP_SCHEDULE=0 2 * * *  # Daily at 2 AM
  #   command: sh /backup.sh
  #   depends_on:
  #     - plumio
  #   networks:
  #     - plumio-network


volumes:
  plumio-data:
    driver: local

networks:
  plumio-network:
    driver: bridge