name: evoliohealth

services:
  app:
    image: "${EVOLIOHEALTH_REGISTRY:-git.zaynet.fr/tony}/evoliohealth-server:${EVOLIOHEALTH_TAG:-dev}"
    user: "${PUID:-1000}:${PGID:-1000}"
    environment:
      APP_ENV: "${APP_ENV:-prod}"
      APP_URL: "${APP_URL:?APP_URL must be set}"
      POCKETBASE_URL: "http://pocketbase:8090"
      TZ: "${TZ:-UTC}"
    ports:
      - "8080:8080"
    volumes:
      - evoliohealth_config:/config
      - evoliohealth_data:/data
    networks:
      - frontend
      - backend
    depends_on:
      pocketbase:
        condition: service_healthy
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8080/health/live"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    restart: unless-stopped

  pocketbase:
    image: "${EVOLIOHEALTH_REGISTRY:-git.zaynet.fr/tony}/evoliohealth-pocketbase:${EVOLIOHEALTH_TAG:-dev}"
    user: "${PUID:-1000}:${PGID:-1000}"
    environment:
      TZ: "${TZ:-UTC}"
    expose:
      - "8090"
    volumes:
      - evoliohealth_pocketbase:/data/pocketbase
    networks:
      - backend
    read_only: true
    tmpfs:
      - /tmp:size=64m,mode=1777
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8090/api/health"]
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 10s
    restart: unless-stopped

networks:
  frontend:
  backend:
    internal: true

volumes:
  evoliohealth_config:
  evoliohealth_data:
  evoliohealth_pocketbase: