services:

  noxway:
    build: .
    # image: noxway/noxway:latest   # use this instead of build: for pre-built image
    ports:
      - "8080:8080"   # HTTP / Admin panel
      - "443:443"     # HTTPS (when SSL is enabled in gateway settings)
    volumes:
      - ./certs:/app/certs   # TLS certificates (Let's Encrypt or custom)
      - ./log:/app/log       # Access logs (when export log is enabled)
    env_file:
      - .env
    environment:
      DATABASE: "postgres://noxway:${POSTGRES_PASSWORD}@db:5432/noxway?sslmode=disable"
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy

  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_DB:       noxway
      POSTGRES_USER:     noxway
      POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}"
    volumes:
      - db_data:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U noxway -d noxway"]
      interval: 5s
      timeout: 5s
      retries: 10

volumes:
  db_data: