rootprint

services:
  app:
    build: .
    container_name: rootprint
    restart: always
    depends_on:
      db:
        condition: service_healthy
      quickwit:
        condition: service_healthy
    environment:
      - DATABASE_URL=postgres://rootprint:rootprint@db:5432/rootprint
      - QUICKWIT_URL=http://quickwit:7280
      - ORIGIN=http://localhost:8282
      # Optional: a stable 32+ char secret for production. If unset, one is
      # generated and persisted to the database on first boot.
      # - BETTER_AUTH_SECRET=replace-with-a-32-char-random-string
    ports:
      - '8282:8282'

  db:
    image: postgres:17
    container_name: rootprint-postgres
    restart: always
    environment:
      - POSTGRES_USER=rootprint
      - POSTGRES_PASSWORD=rootprint
      - POSTGRES_DB=rootprint
    ports:
      - '5432:5432'
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U rootprint']
      interval: 5s
      timeout: 3s
      retries: 10

  quickwit:
    image: quickwit/quickwit:v0.9.0
    container_name: quickwit
    ports:
      - '127.0.0.1:7280:7280' # REST API + Web UI (local only)
      - '127.0.0.1:7281:7281' # gRPC (local only)
    volumes:
      - ./quickwit.yaml:/quickwit/config/quickwit.yaml:ro
      - ./.quickwit/qwdata:/quickwit/qwdata
    command: ['run']
    healthcheck:
      test: ['CMD-SHELL', 'bash -c "echo > /dev/tcp/localhost/7280"']
      interval: 10s
      timeout: 5s
      retries: 10

  dex:
    image: dexidp/dex:v2.45.1-alpine
    container_name: rootprint-dex
    command: ['dex', 'serve', '/etc/dex/config.yaml']
    volumes:
      - ./dex.yaml:/etc/dex/config.yaml:ro
    ports:
      - '127.0.0.1:5556:5556'
    healthcheck:
      test:
        [
          'CMD-SHELL',
          'wget -qO- http://127.0.0.1:5556/dex/.well-known/openid-configuration >/dev/null'
        ]
      interval: 5s
      timeout: 3s
      retries: 10

volumes:
  postgres_data: