# Standalone single-box deploy: Gluecron + Postgres(pgvector) + Caddy(auto-HTTPS)
# plus self-healing (autoheal), log rotation, daily backups, and fast auto-deploy.
#
# For a DEDICATED VPS where Gluecron owns ports 80/443 (no co-tenant). One
# command brings up the whole stack with automatic Let's Encrypt certs:
#
#   docker compose -f docker-compose.standalone.yml up -d --build
#
# Variables come from a local .env (POSTGRES_PASSWORD, optional ANTHROPIC_API_KEY)
# — see scripts/standalone-deploy.sh which generates it and installs the backup
# + auto-deploy systemd timers. The Caddyfile already serves gluecron.com + www.

x-logging: &default-logging
  driver: json-file
  options:
    max-size: "10m"
    max-file: "3"

services:
  postgres:
    # pgvector image is required: migration 0057 does CREATE EXTENSION vector.
    image: pgvector/pgvector:pg16
    environment:
      POSTGRES_USER: gluecron
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: gluecron
    volumes:
      - pgdata:/var/lib/postgresql/data
    restart: unless-stopped
    logging: *default-logging
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U gluecron -d gluecron"]
      interval: 10s
      timeout: 5s
      retries: 6

  gluecron:
    build: .
    environment:
      - DATABASE_URL=${DATABASE_URL:-}
      - GIT_REPOS_PATH=/data/repos
      - PORT=3000
      - NODE_ENV=production
      - APP_BASE_URL=https://gluecron.com
      - SSH_PORT=0
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY:-}
      # "Sign in with Google" — values come from .env (gitignored). Wiring them
      # here is what makes the env bootstrap reach the container and survive
      # redeploys; a config saved at /admin/google-oauth (DB) still takes
      # precedence over these.
      - GOOGLE_OAUTH_CLIENT_ID=${GOOGLE_OAUTH_CLIENT_ID:-}
      - GOOGLE_OAUTH_CLIENT_SECRET=${GOOGLE_OAUTH_CLIENT_SECRET:-}
      - GOOGLE_OAUTH_AUTO_CREATE=${GOOGLE_OAUTH_AUTO_CREATE:-}
      - GOOGLE_OAUTH_ALLOWED_DOMAINS=${GOOGLE_OAUTH_ALLOWED_DOMAINS:-}
    expose:
      - "3000"
    volumes:
      - git-repos:/data/repos
    depends_on:
      postgres:
        condition: service_healthy
    restart: unless-stopped
    logging: *default-logging
    healthcheck:
      # Liveness — autoheal restarts the container if this fails repeatedly.
      test: ["CMD", "wget", "-qO-", "http://localhost:3000/healthz"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  caddy:
    image: caddy:2-alpine
    restart: unless-stopped
    logging: *default-logging
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy-data:/data
      - caddy-config:/config
    depends_on:
      - gluecron

  # Self-healing: watches every container that declares a healthcheck and
  # restarts any that goes unhealthy (a hung process that didn't crash).
  autoheal:
    image: willfarrell/autoheal:latest
    restart: unless-stopped
    logging: *default-logging
    environment:
      - AUTOHEAL_CONTAINER_LABEL=all
      - AUTOHEAL_INTERVAL=15
      - AUTOHEAL_START_PERIOD=60
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

volumes:
  pgdata:
  git-repos:
  caddy-data:
  caddy-config: