docker-compose.yml

version: '3.8'

services:
  # AuthForge API
  authforge:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "3000:3000"
    environment:
      - NODE_ENV=production
      - PORT=3000
      - DATABASE_URL=postgresql://authforge:authforge_secret@postgres:5432/authforge?schema=public
      - REDIS_URL=redis://redis:6379
      - JWT_ACCESS_SECRET=${JWT_ACCESS_SECRET:-your-super-secret-access-key-min-32-chars}
      - JWT_REFRESH_SECRET=${JWT_REFRESH_SECRET:-your-super-secret-refresh-key-min-32-chars}
      - JWT_ACCESS_EXPIRY=15m
      - JWT_REFRESH_EXPIRY=7d
      - JWT_ISSUER=https://auth.authforge.io
      - CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:3001}
      - COOKIE_SECURE=true
      - COOKIE_SAME_SITE=strict
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - authforge-network

  # PostgreSQL Database
  postgres:
    image: postgres:16-alpine
    environment:
      - POSTGRES_USER=authforge
      - POSTGRES_PASSWORD=authforge_secret
      - POSTGRES_DB=authforge
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U authforge -d authforge" ]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - authforge-network

  # Redis Cache
  redis:
    image: redis:7-alpine
    command: redis-server --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
    volumes:
      - redis_data:/data
    ports:
      - "6379:6379"
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped
    networks:
      - authforge-network

  # Database Migrations (run once)
  migrate:
    build:
      context: .
      dockerfile: Dockerfile
      target: builder
    command: sh -c "npx prisma migrate deploy && npx prisma db seed"
    environment:
      - DATABASE_URL=postgresql://authforge:authforge_secret@postgres:5432/authforge?schema=public
    depends_on:
      postgres:
        condition: service_healthy
    networks:
      - authforge-network

networks:
  authforge-network:
    driver: bridge

volumes:
  postgres_data:
  redis_data: