docker-compose.yml

services:
  postgres:
    image: postgres:18.2 # latest
    container_name: postgres_cryptowrap
    environment:
      POSTGRES_USER: ${DB_USER}
      # ideally use docker compose secrets for this
      POSTGRES_PASSWORD: ${DB_PASS}
      POSTGRES_DB: ${DB_NAME}
    ports: # expose with 5432 by default
      - "127.0.0.1:5432:5432" # localhost only
    volumes:
      - postgres_data:/var/lib/postgresql
    # restart: unless-stopped #always/no
    restart: no
    # networks: # it actually isolates container from outside network (e.g. ports : local forward won't work)
      # - db_network  # Both services share this network


  # add redis container for stateless rate-limiting


  
  main-cv:
    image: gcr.io/distroless/cc-debian13
    volumes:
      - ./app/:/app
    ports:
       - "127.0.0.1:8080:8080"
    working_dir: "/app"
    command: [
      "./release-cw"
    ]
    restart: unless-stopped



volumes:
  postgres_data:

# networks: 
  # db_network:  # Creates an isolated network for the services 
    # driver: bridge

# ->./_*~^%$#@!&()+=?|":;<{}''"