docker-compose.yml

services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_DB: formy
      POSTGRES_USER: formy
      POSTGRES_PASSWORD: formy
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U formy"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 5s
      retries: 5

  backend:
    build:
      context: .
      dockerfile: backend/Dockerfile
    environment:
      DJANGO_SECRET_KEY: ${DJANGO_SECRET_KEY:-change-me-in-production}
      DJANGO_DEBUG: "False"
      DJANGO_ALLOWED_HOSTS: localhost,127.0.0.1,backend
      # No TLS termination in this compose file (nginx serves plain HTTP). Set to "True"
      # once a real reverse proxy/load balancer terminates TLS in front of this stack.
      DJANGO_SECURE_SSL_REDIRECT: "False"
      DJANGO_DB_ENGINE: django.db.backends.postgresql
      DJANGO_DB_NAME: formy
      DJANGO_DB_USER: formy
      DJANGO_DB_PASSWORD: formy
      DJANGO_DB_HOST: db
      DJANGO_DB_PORT: 5432
      # Shared cache so rate limiting works correctly across gunicorn's multiple worker processes.
      REDIS_URL: redis://redis:6379/0
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    ports:
      - "8000:8000"
    volumes:
      - media_data:/app/backend/media
    command: >
      sh -c "python manage.py migrate --noinput &&
             gunicorn config.wsgi:application --bind 0.0.0.0:8000 --workers 3"

  frontend:
    build:
      context: .
      dockerfile: frontend/Dockerfile
      args:
        VITE_API_BASE_URL: /api
    ports:
      - "8080:80"
    depends_on:
      - backend

volumes:
  postgres_data:
  media_data: