services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
      POSTGRES_DB: kcapp
    volumes:
      - pgdata:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres -d kcapp"]
      interval: 5s
      timeout: 5s
      retries: 10

  api:
    build:
      context: .
      dockerfile: Dockerfile
    depends_on:
      db:
        condition: service_healthy
    # All non-DB config comes from backend/.env (needs Docker Compose v2,
    # which strips surrounding quotes). DATABASE_URL and the FCM credential
    # path are overridden below for the container.
    env_file:
      - backend/.env
    environment:
      DATABASE_URL: postgresql://postgres:postgres@db:5432/kcapp?schema=public
      PORT: "3000"
      GOOGLE_APPLICATION_CREDENTIALS: /app/serviceAccount.json
      APP_BASE_URL: http://localhost:3010
    ports:
      - "3010:3000"
    volumes:
      # Firebase service account — kept out of the image, mounted read-only.
      - ./backend/serviceAccount.json:/app/serviceAccount.json:ro

volumes:
  pgdata: