docker-compose.dev.yml

services:
  traefik:
    ports:
      - "80:80"
      - "443:443"
    # - "8080:8080" # Uncomment to enable Traefik's dashboard
    networks:
      development:
        aliases:
          - laravel.dev.test
          - vite.dev.test
          - mailpit.dev.test
          - reverb.dev.test
          - console.laravel.dev.test
          - media.laravel.dev.test
          - meilisearch.dev.test
    volumes:
      # Mount the Docker socket as read-only so Traefik can listen to events
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./.infrastructure/conf/traefik/dev/traefik.yml:/traefik.yml:ro
      - ./.infrastructure/conf/traefik/dev/traefik-certs.yml:/traefik-certs.yml
      - ./.infrastructure/conf/traefik/dev/certificates/:/certificates
  php:
    build:
      target: development
      args:
        USER_ID: ${SPIN_USER_ID}
        GROUP_ID: ${SPIN_GROUP_ID}
      dockerfile: Dockerfile.php
    stop_signal: SIGTERM
    volumes:
      - .:/var/www/html/
    networks:
      - development
    depends_on:
      postgres:
        condition: service_started
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.laravel-web.rule=Host(`laravel.dev.test`) || HostRegexp(`^.+\\.ngrok-free\\.app$$`)"
      - "traefik.http.routers.laravel-web.tls=true"
      - "traefik.http.routers.laravel-web.entrypoints=websecure"
      - "traefik.http.services.laravel-web.loadbalancer.server.port=8443"
      - "traefik.http.services.laravel-web.loadbalancer.server.scheme=https"
  node:
    build:
      target: development
      args:
        USER_ID: ${SPIN_USER_ID}
        GROUP_ID: ${SPIN_GROUP_ID}
      dockerfile: Dockerfile.node
    command: npm run dev
    volumes:
      - .:/usr/src/app/
    working_dir: /usr/src/app/
    networks:
      - development
  ssr:
    build:
      dockerfile: Dockerfile.ssr
    command: node bootstrap/ssr/ssr.js
    networks:
      - development
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://localhost:13714/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 10s
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.vite.rule=HostRegexp(`vite.dev.test`)"
      - "traefik.http.routers.vite.entrypoints=websecure"
      - "traefik.http.routers.vite.tls=true"
      - "traefik.http.services.vite.loadbalancer.server.port=5173"
      - "traefik.http.services.vite.loadbalancer.server.scheme=https"
  mailpit:
    image: axllent/mailpit
    networks:
      - development
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.mailpit.rule=Host(`mailpit.dev.test`)"
      - "traefik.http.routers.mailpit.entrypoints=websecure"
      - "traefik.http.routers.mailpit.tls=true"
      - "traefik.http.services.mailpit.loadbalancer.server.port=8025"
      - "traefik.http.services.mailpit.loadbalancer.server.scheme=http"
  schedule:
    build:
      target: development
      args:
        USER_ID: ${SPIN_USER_ID}
        GROUP_ID: ${SPIN_GROUP_ID}
      dockerfile: Dockerfile.php
    volumes:
      - .:/var/www/html/
    networks:
      - development
    depends_on:
      php:
        condition: service_started
      postgres:
        condition: service_healthy
  postgres:
    networks:
      - development
    volumes:
      - ./.infrastructure/volume_data/postgres/database_data/:/var/lib/postgresql
      - './.infrastructure/conf/database/create-testing-database.sh:/docker-entrypoint-initdb.d/10-create-testing-database.sh'
    environment:
      POSTGRES_DB: "laravel"
      POSTGRES_USER: "postgres"
      POSTGRES_PASSWORD: "postgrespassword"
    ports:
      - target: 5432
        published: 5432
        mode: host
  redis:
    command: "redis-server --appendonly yes --requirepass redispassword"
    volumes:
      - ./.infrastructure/volume_data/redis/data:/data
    networks:
      - development
  horizon:
    build:
      target: development
      args:
        USER_ID: ${SPIN_USER_ID}
        GROUP_ID: ${SPIN_GROUP_ID}
      dockerfile: Dockerfile.php
    volumes:
      - .:/var/www/html/
    networks:
      - development
    depends_on:
      redis:
        condition: service_healthy
      php:
        condition: service_started
  reverb:
    build:
      target: development
      args:
        USER_ID: ${SPIN_USER_ID}
        GROUP_ID: ${SPIN_GROUP_ID}
      dockerfile: Dockerfile.php
    volumes:
      - .:/var/www/html/
    networks:
      - development
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.laravel-reverb.rule=Host(`reverb.dev.test`)"
      - "traefik.http.routers.laravel-reverb.entrypoints=websecure"
      - "traefik.http.routers.laravel-reverb.tls=true"
      - "traefik.http.services.laravel-reverb.loadbalancer.server.port=8000"
      - "traefik.http.services.laravel-reverb.loadbalancer.server.scheme=http"
    depends_on:
      php:
        condition: service_started
      postgres:
        condition: service_healthy

  # Replace MinIO service with RustFS for development environment
  rustfs:
    image: rustfs/rustfs:latest
    security_opt:
      - "no-new-privileges:true"
    environment:
      RUSTFS_VOLUMES: '/data'
      RUSTFS_ADDRESS: '0.0.0.0:9000'
      RUSTFS_CONSOLE_ADDRESS: '0.0.0.0:9001'
      RUSTFS_CONSOLE_ENABLE: 'true'
      RUSTFS_EXTERNAL_ADDRESS: ':9000'
      RUSTFS_CORS_ALLOWED_ORIGINS: '*'
      RUSTFS_CONSOLE_CORS_ALLOWED_ORIGINS: '*'
      RUSTFS_ACCESS_KEY: 'rust'
      RUSTFS_SECRET_KEY: 'password'
      RUSTFS_LOG_LEVEL: 'info'
      RUSTFS_OBS_LOGGER_LEVEL: 'info'
    volumes:
      - ./.infrastructure/volume_data/rustfs/data:/data
      - ./.infrastructure/volume_data/rustfs/logs:/app/logs
    healthcheck:
      test:
        [
          "CMD",
          "sh", "-c",
          "curl -f http://localhost:9000/health && curl -f http://localhost:9001/rustfs/console/health"
        ]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    networks:
      - development
    restart: unless-stopped
    labels:
      - "traefik.enable=true"

      # ---------- API ----------
      - "traefik.http.routers.rustfs-api.rule=Host(`media.laravel.dev.test`)"
      - "traefik.http.routers.rustfs-api.entrypoints=websecure"
      - "traefik.http.routers.rustfs-api.tls=true"
      - "traefik.http.routers.rustfs-api.priority=20"
      - "traefik.http.routers.rustfs-api.service=rustfs-api-svc"
      - "traefik.http.services.rustfs-api-svc.loadbalancer.server.port=9000"
      - "traefik.http.services.rustfs-api-svc.loadbalancer.server.scheme=http"

      # ---------- Console ----------
      - "traefik.http.routers.rustfs-console.rule=Host(`console.laravel.dev.test`)"
      - "traefik.http.routers.rustfs-console.entrypoints=websecure"
      - "traefik.http.routers.rustfs-console.tls=true"
      - "traefik.http.routers.rustfs-console.priority=10"
      - "traefik.http.routers.rustfs-console.service=rustfs-console-svc"
      - "traefik.http.services.rustfs-console-svc.loadbalancer.server.port=9001"
      - "traefik.http.services.rustfs-console-svc.loadbalancer.server.scheme=http"

  volume-permission-helper:
    image: alpine
    volumes:
      - ./.infrastructure/volume_data/rustfs/data:/data
      - ./.infrastructure/volume_data/rustfs/logs:/logs
    command: >
      sh -c "
        chown -R 10001:10001 /data /logs &&
        echo 'Volume Permissions fixed' &&
        exit 0
      "
    restart: "no"

  # Use mc (minio client) to create the bucket and set public policy against RustFS
#  bucket-user-init:
#    image: serversideup/minio-user-init:latest
#    depends_on:
#      rustfs:
#        condition: service_healthy
#    networks:
#      - development
#    environment:
#      MINIO_ADMIN_USER: "rust"
#      MINIO_ADMIN_PASSWORD: "password"
#      MINIO_ALIAS: "rustfs"
#      MINIO_HOST: "http://rustfs:9000"
#      MINIO_USER_ACCESS_KEY: "media_user"
#      MINIO_USER_SECRET_KEY: "a5hU92!aPoxxxj2@T3s$"
#      MINIO_USER_BUCKET: "media"
#      MINIO_USER_BUCKET_PERMISSIONS: "s3:ListBucket,s3:GetBucketLocation"
#      MINIO_USER_OBJECT_PERMISSIONS: "s3:PutObject,s3:GetObject"

  rustfs-bucket-init:
    image: minio/mc:latest
    depends_on:
      rustfs:
        condition: service_healthy
    networks:
      - development
    entrypoint: >
      /bin/sh -c "
      sleep 5;
      /usr/bin/mc alias set rustfs http://rustfs:9000 $RUSTFS_ACCESS_KEY $RUSTFS_SECRET_KEY &&
      /usr/bin/mc mb rustfs/$RUSTFS_BUCKET || true &&
      /usr/bin/mc anonymous set download rustfs/$RUSTFS_BUCKET
      exit 0;
      "
    command: >
    environment:
      RUSTFS_ACCESS_KEY: rust
      RUSTFS_SECRET_KEY: password
      RUSTFS_BUCKET: media
    restart: "no"

networks:
  development: