docker-compose.yaml

services:
  # PostgreSQL Database (Optional - use with --profile postgres)
  postgres:
    image: postgres:16-alpine
    container_name: jumphost-postgres
    profiles:
      - postgres
    env_file: .env
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-jumphost}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-jumphostpass}
      POSTGRES_DB: ${POSTGRES_DB:-jumphost}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-jumphost}"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Jumphost Application
  web:
    build: .
    container_name: jumphost
    env_file: .env
    ports:
      - "${WEB_PORT:-3000}:3000"
      - "2222:2222"
    volumes:
      - ./data:/app/data
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
        required: false

  # Nginx TLS Reverse Proxy (Optional - use with --profile tls)
  nginx:
    image: nginx:alpine
    container_name: jumphost-nginx
    profiles:
      - tls
    ports:
      - "${WEB_PORT:-8443}:443"
      - "80:80"
    volumes:
      - ./certs:/etc/nginx/certs:ro
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
    depends_on:
      - jumphost
    restart: unless-stopped

volumes:
  postgres_data: