name: loud-platform

# Production base configuration.
# Deploys a pre-built image pulled from a registry — no build step.
#
#   docker compose -f docker-compose.yml pull
#   docker compose -f docker-compose.yml up -d
#
# The `-f docker-compose.yml` flag is important in production: it skips the
# docker-compose.override.yml file, which Compose would otherwise merge in
# automatically for local development.
services:
  website:
    image: ${HOST_CONTAINER}/${HOST_OWNER}/${IMAGE_NAME}:${IMAGE_TAG:-latest}
    platform: linux/amd64
    container_name: ${HOST_OWNER}-${IMAGE_NAME}
    restart: unless-stopped
    ports:
      - "${HOST_PORT:-8080}:8080"
    environment:
      LOG_LEVEL: ${LOG_LEVEL:-info}
      HTTP_SERVER_NAME: ${HTTP_SERVER_NAME:-LoudWebsite}
      SECURITY_STRICT_TRANSPORT_SECURITY: "${SECURITY_STRICT_TRANSPORT_SECURITY:-max-age=31536000; includeSubDomains}"
      # Persistence: in-memory by default; set DATABASE_DRIVER=mysql to run against a
      # managed MySQL/MariaDB database. Provide the password via the environment or a
      # secret — never commit it.
      DATABASE_DRIVER: ${DATABASE_DRIVER:-mysql}
      DATABASE_HOST: ${DATABASE_HOST:-localhost}
      DATABASE_PORT: ${DATABASE_PORT:-3306}
      DATABASE_NAME: ${DATABASE_NAME:-loud-ams}
      DATABASE_USERNAME: ${DATABASE_USERNAME:-loud-ams}
      DATABASE_PASSWORD: ${DATABASE_PASSWORD:-}
      DATABASE_TLS: ${DATABASE_TLS:-require}
    healthcheck:
      test: ["CMD", "curl", "--fail", "--silent", "--show-error", "http://127.0.0.1:8080/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s