docker-compose.yml

services:
  gateway:
    image: nginx:alpine
    container_name: basekarya_gateway
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./gateway/nginx.conf:/etc/nginx/nginx.conf:ro
      # Volume for cert
      # - ./certbot/conf:/etc/letsencrypt
      # - ./certbot/www:/var/www/certbot
    depends_on:
      - frontend
      - backend
    networks:
      - basekarya_net
  db:
    image: mysql:8.0
    container_name: basekarya_db
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
    volumes:
      - db_data:/var/lib/mysql
    networks:
      - basekarya_net
    healthcheck:
      test:
        [
          "CMD",
          "mysqladmin",
          "ping",
          "-h",
          "localhost",
          "-u${MYSQL_USER}",
          "-p${MYSQL_PASSWORD}",
        ]
      interval: 5s
      timeout: 5s
      retries: 10
  migrate:
    image: migrate/migrate
    container_name: db-migrate
    volumes:
      - ./backend/migrations/:/migrations
    command:
      [
        "-path",
        "/migrations",
        "-database",
        "mysql://${MYSQL_USER}:${MYSQL_PASSWORD}@tcp(${MYSQL_HOST}:${MYSQL_PORT})/${MYSQL_DATABASE}",
        "up",
      ]
    depends_on:
      db:
        condition: service_healthy
    networks:
      - basekarya_net
  minio:
    image: minio/minio
    container_name: minio
    restart: always
    ports:
      - "${MINIO_PORT:-9000}:9000"
      - "${MINIO_PORT_ADMIN:-9001}:9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    volumes:
      - minio_data:/data
    command: server --console-address ":9001" /data
    networks:
      - basekarya_net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://minio:9000/minio/health/live"]
      interval: 5s
      timeout: 5s
      retries: 5
  minio-init:
    image: minio/mc
    container_name: minio-init
    depends_on:
      minio:
        condition: service_healthy
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
      MINIO_BUCKET_NAME: ${MINIO_BUCKET_NAME}
    entrypoint: >
      /bin/sh -c "
      /usr/bin/mc alias set myminio http://minio:9000 ${MINIO_ROOT_USER} ${MINIO_ROOT_PASSWORD};
      /usr/bin/mc mb myminio/${MINIO_BUCKET_NAME} --ignore-existing;
      /usr/bin/mc anonymous set download myminio/${MINIO_BUCKET_NAME};
      exit 0;
      "
    networks:
      - basekarya_net
  redis:
    image: redis:alpine
    container_name: basekarya_redis
    restart: always
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    networks:
      - basekarya_net
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 5
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    image: basekarya-backend:latest
    container_name: basekarya_backend
    restart: unless-stopped
    expose:
      - "${SERVER_PORT}"
    depends_on:
      db:
        condition: service_healthy
      minio:
        condition: service_healthy
      redis:
        condition: service_healthy
    environment:
      MYSQL_USER: ${MYSQL_USER}
      MYSQL_PASSWORD: ${MYSQL_PASSWORD}
      MYSQL_HOST: ${MYSQL_HOST}
      MYSQL_PORT: ${MYSQL_PORT}
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      MYSQL_SSLMODE: ${MYSQL_SSLMODE}
      JWT_SECRET: ${JWT_SECRET}
      JWT_EXPIRES_IN_HOUR: ${JWT_EXPIRES_IN_HOUR}
      SERVER_PORT: ${SERVER_PORT}
      SERVER_ENV: ${SERVER_ENV}
      MINIO_ENDPOINT: ${MINIO_ENDPOINT}
      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
      MINIO_BUCKET_NAME: ${MINIO_BUCKET_NAME}
      MINIO_BUCKET_LOCATION: ${MINIO_BUCKET_LOCATION}
      MINIO_IS_SECURE: ${MINIO_IS_SECURE}
      MINIO_PUBLIC_DOMAIN: ${MINIO_PUBLIC_DOMAIN}
      LOG_LEVEL: ${LOG_LEVEL}
      MAX_REQUEST_BODY_SIZE_MB: ${MAX_REQUEST_BODY_SIZE_MB}
      MAX_FILE_SIZE_MB: ${MAX_FILE_SIZE_MB}
      NOMINATIM_URL: ${NOMINATIM_URL}
      SUPERADMIN_USERNAME: ${SUPERADMIN_USERNAME}
      SUPERADMIN_PASSWORD: ${SUPERADMIN_PASSWORD}
      REDIS_ADDR: ${REDIS_ADDR}
      REDIS_PASSWORD: ${REDIS_PASSWORD}
      SMTP_HOST: ${SMTP_HOST}
      SMTP_PORT: ${SMTP_PORT}
      SMTP_USER: ${SMTP_USER}
      SMTP_PASS: ${SMTP_PASS}
      SMTP_FROM: ${SMTP_FROM}
    networks:
      - basekarya_net
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8081/health"]
      interval: 5s
      timeout: 5s
      retries: 5
  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        VITE_API_URL: ${VITE_API_URL}
    image: basekarya-frontend:latest
    container_name: basekarya_frontend
    restart: unless-stopped
    depends_on:
      backend:
        condition: service_started
    environment:
      NODE_ENV: ${SERVER_ENV}
      VITE_API_URL: ${VITE_API_URL}
    healthcheck:
      test: ["CMD", "curl", "-f", "http://backend:8081/health"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s
    security_opt:
      - no-new-privileges:true
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/log/nginx
      - /run
    networks:
      - basekarya_net

networks:
  basekarya_net:
    driver: bridge

volumes:
  db_data:
  minio_data:
  redis_data: