version: "3.8"

services:
  database:
    image: postgres:16-alpine
    container_name: unidesk-database
    restart: unless-stopped
    expose:
      - "5432"
    environment:
      POSTGRES_USER: "${UNIDESK_DATABASE_USER}"
      POSTGRES_PASSWORD: "${UNIDESK_DATABASE_PASSWORD}"
      POSTGRES_DB: "${UNIDESK_DATABASE_NAME}"
    command:
      - "postgres"
      - "-c"
      - "config_file=/etc/postgresql/postgresql.conf"
      - "-c"
      - "logging_collector=on"
      - "-c"
      - "log_directory=/var/log/unidesk"
      - "-c"
      - "log_filename=${UNIDESK_LOG_PREFIX}_database.log"
      - "-c"
      - "log_connections=on"
      - "-c"
      - "log_disconnections=on"
    volumes:
      - unidesk_pgdata_10gb:/var/lib/postgresql/data
      - ./src/components/database/init:/docker-entrypoint-initdb.d:ro
      - ./src/components/database/config/postgresql.conf:/etc/postgresql/postgresql.conf:ro
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${UNIDESK_DATABASE_USER} -d ${UNIDESK_DATABASE_NAME}"]
      interval: 5s
      timeout: 3s
      retries: 20

  backend-core:
    build:
      context: .
      dockerfile: src/components/backend-core/Dockerfile
    container_name: unidesk-backend-core
    restart: unless-stopped
    depends_on:
      - database
    ports:
      - "${UNIDESK_PROVIDER_INGRESS_PORT}:8081"
    expose:
      - "8080"
    environment:
      PORT: "8080"
      PROVIDER_PORT: "8081"
      DATABASE_URL: "postgres://${UNIDESK_DATABASE_USER}:${UNIDESK_DATABASE_PASSWORD}@database:5432/${UNIDESK_DATABASE_NAME}"
      PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
      HEARTBEAT_TIMEOUT_MS: "${UNIDESK_HEARTBEAT_TIMEOUT_MS}"
      TASK_PENDING_TIMEOUT_MS: "${UNIDESK_TASK_PENDING_TIMEOUT_MS:-600000}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_PREFIX}_backend-core.jsonl"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  frontend:
    build:
      context: .
      dockerfile: src/components/frontend/Dockerfile
    container_name: unidesk-frontend
    restart: unless-stopped
    depends_on:
      - backend-core
    ports:
      - "${UNIDESK_FRONTEND_PORT}:8080"
    environment:
      PORT: "8080"
      CORE_INTERNAL_URL: "http://backend-core:8080"
      FRONTEND_PUBLIC_URL: "http://${UNIDESK_PUBLIC_HOST}:${UNIDESK_FRONTEND_PORT}"
      PROVIDER_INGRESS_PUBLIC_URL: "ws://${UNIDESK_PUBLIC_HOST}:${UNIDESK_PROVIDER_INGRESS_PORT}/ws/provider"
      AUTH_USERNAME: "${UNIDESK_AUTH_USERNAME}"
      AUTH_PASSWORD: "${UNIDESK_AUTH_PASSWORD}"
      SESSION_SECRET: "${UNIDESK_SESSION_SECRET}"
      SESSION_TTL_SECONDS: "${UNIDESK_SESSION_TTL_SECONDS}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_PREFIX}_frontend.jsonl"
    volumes:
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    healthcheck:
      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
      interval: 5s
      timeout: 3s
      retries: 20

  provider-gateway:
    image: unidesk_provider-gateway
    build:
      context: .
      dockerfile: src/components/provider-gateway/Dockerfile
    container_name: unidesk-provider-gateway-main
    restart: unless-stopped
    depends_on:
      - backend-core
    environment:
      PROVIDER_SERVER_URL: "ws://backend-core:8081/ws/provider"
      PROVIDER_TOKEN: "${UNIDESK_PROVIDER_TOKEN}"
      PROVIDER_ID: "${UNIDESK_PROVIDER_ID}"
      PROVIDER_NAME: "${UNIDESK_PROVIDER_NAME}"
      PROVIDER_LABELS_JSON: "${UNIDESK_PROVIDER_LABELS_JSON}"
      HEARTBEAT_INTERVAL_MS: "${UNIDESK_HEARTBEAT_INTERVAL_MS}"
      RECONNECT_BASE_MS: "${UNIDESK_RECONNECT_BASE_MS}"
      RECONNECT_MAX_MS: "${UNIDESK_RECONNECT_MAX_MS}"
      DOCKER_SOCKET_PATH: "/var/run/docker.sock"
      MONITOR_DISK_PATH: "${UNIDESK_MONITOR_DISK_PATH}"
      PROVIDER_UPGRADE_HOST_PROJECT_ROOT: "${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}"
      PROVIDER_UPGRADE_WORKSPACE_PATH: "${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}"
      PROVIDER_UPGRADE_COMPOSE_FILE: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_FILE}"
      PROVIDER_UPGRADE_ENV_FILE: "${UNIDESK_PROVIDER_UPGRADE_ENV_FILE}"
      PROVIDER_UPGRADE_COMPOSE_PROJECT: "${UNIDESK_PROVIDER_UPGRADE_COMPOSE_PROJECT}"
      PROVIDER_UPGRADE_SERVICE: "${UNIDESK_PROVIDER_UPGRADE_SERVICE}"
      PROVIDER_UPGRADE_RUNNER_IMAGE: "${UNIDESK_PROVIDER_UPGRADE_RUNNER_IMAGE}"
      LOG_FILE: "/var/log/unidesk/${UNIDESK_LOG_PREFIX}_provider-gateway.jsonl"
      HOST_SSH_HOST: "${UNIDESK_HOST_SSH_HOST}"
      HOST_SSH_PORT: "${UNIDESK_HOST_SSH_PORT}"
      HOST_SSH_USER: "${UNIDESK_HOST_SSH_USER}"
      HOST_SSH_KEY: "/run/host-ssh/id_ed25519"
      HOST_REMOTE_CWD: "/root"
      HOST_LOGIN_SHELL: "/bin/bash"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ${UNIDESK_PROVIDER_UPGRADE_HOST_PROJECT_ROOT}:${UNIDESK_PROVIDER_UPGRADE_WORKSPACE_PATH}:ro
      - ${UNIDESK_HOST_SSH_KEY_DIR}:/run/host-ssh:ro
      - ${UNIDESK_LOG_DIR}:/var/log/unidesk
    extra_hosts:
      - "host.docker.internal:host-gateway"

volumes:
  unidesk_pgdata_10gb:
    name: unidesk_pgdata_10gb