docker-compose.yml

services:
  db:
    image: postgres:16
    environment:
      POSTGRES_DB: tracevault
      POSTGRES_USER: tracevault
      POSTGRES_PASSWORD: tracevault
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U tracevault"]
      interval: 5s
      timeout: 5s
      retries: 5

  server:
    build: .
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://tracevault:tracevault@db:5432/tracevault
      HOST: 0.0.0.0
      PORT: 3000
      RUST_LOG: info
      CORS_ORIGIN: http://localhost:5173
      # Required: AES-256 encryption key for per-org signing keys, deploy keys, etc.
      # Generate with: openssl rand -base64 32
      TRACEVAULT_ENCRYPTION_KEY: ${TRACEVAULT_ENCRYPTION_KEY:?Set TRACEVAULT_ENCRYPTION_KEY env var (openssl rand -base64 32)}
    ports:
      - "3000:3000"

  web:
    build:
      context: ./web
      dockerfile: Dockerfile
    ports:
      - "5173:4000"
    environment:
      API_URL: http://server:3000
    depends_on:
      - server

volumes:
  pgdata: