docker-compose.yml

services:
  app:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: auth_api_app
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    ports:
      - "3000:3000"
    environment:
      NODE_ENV: production
      PORT: 3000
      DATABASE_URL: postgresql://auth_user:auth_password@postgres:5432/auth_api
      ACCESS_TOKEN_SECRET: replace-this-with-a-strong-access-secret-123456
      REFRESH_TOKEN_SECRET: replace-this-with-a-strong-refresh-secret-12345
      ACCESS_TOKEN_EXPIRES_IN: 15m
      REFRESH_TOKEN_EXPIRES_IN: 7d
      JWT_ISSUER: auth-api
      JWT_AUDIENCE: auth-api-clients
      REDIS_URL: redis://redis:6379
      RATE_LIMIT_WINDOW_MS: 60000
      RATE_LIMIT_MAX_REQUESTS: 100
      LOG_LEVEL: info
      TRUST_PROXY: 1
      DOCS_ENABLED: "true"
      BCRYPT_ROUNDS: 10

  postgres:
    image: postgres:16
    container_name: auth_api_postgres
    restart: unless-stopped
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: auth_user
      POSTGRES_PASSWORD: auth_password
      POSTGRES_DB: auth_api
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U auth_user -d auth_api"]
      interval: 5s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    container_name: auth_api_redis
    restart: unless-stopped
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 3s
      retries: 10

volumes:
  postgres_data:
  redis_data: