docker-compose.prod.yml

# Production Docker Compose for SteerDock

services:
  # MySQL Database
  mysql:
    image: mysql:8.0
    container_name: steerdock-mysql
    restart: unless-stopped
    environment:
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
    volumes:
      - mysql_data:/var/lib/mysql
      - ./sql/init_database_mysql.sql:/docker-entrypoint-initdb.d/init_database_mysql.sql
    ports:
      - "3306:3306"
    command: --default-authentication-plugin=caching_sha2_password
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "${MYSQL_USER}", "-p${MYSQL_PASSWORD}"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - steerdock-network

  # Redis Cache
  redis:
    image: redis:7-alpine
    container_name: steerdock-redis
    restart: unless-stopped
    command: redis-server --requirepass ${REDIS_PASSWORD} --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
    environment:
      - REDIS_PASSWORD=${REDIS_PASSWORD}
    volumes:
      - redis_data:/data
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
      interval: 10s
      timeout: 3s
      retries: 3
    networks:
      - steerdock-network

  # Main SteerDock Application
  steerdock:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: steerdock-app
    restart: unless-stopped
    ports:
      - "5151:5151"  # Frontend
      - "8383:8383"  # Backend API
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - steerdock_data:/app/data
      - steerdock_logs:/app/logs
    environment:
      - PORT=8383
      - FRONTEND_PORT=5151
      - GIN_MODE=release
      - SQL_TYPE=${SQL_TYPE}
      - MYSQL_HOST=mysql
      - MYSQL_PORT=3306
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_PASSWORD=${REDIS_PASSWORD}
      - JWT_SECRET=${JWT_SECRET}
      - ALLOWED_ORIGINS=${ALLOWED_ORIGINS}
      - BASE_URL=${BASE_URL}
      
      # OAuth (optional)
      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID:-}
      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET:-}
      - GITHUB_CLIENT_ID=${GITHUB_CLIENT_ID:-}
      - GITHUB_CLIENT_SECRET=${GITHUB_CLIENT_SECRET:-}
      
      # Application features
      - DB_AUTO_MIGRATE=true
      - CREATE_DEFAULT_USERS=true
      - AUDIT_LOGGING=true
      - METRICS_ENABLED=true
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8383/health/live"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    networks:
      - steerdock-network

  # Nginx Reverse Proxy (optional)
  nginx:
    image: nginx:alpine
    container_name: steerdock-nginx
    restart: unless-stopped
    profiles: ["nginx"]
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
    depends_on:
      - steerdock
    networks:
      - steerdock-network

  # Backup Service
  backup:
    image: mysql:8.0
    container_name: steerdock-backup
    restart: "no"
    profiles: ["backup"]
    environment:
      - MYSQL_PWD=${MYSQL_PASSWORD}
    volumes:
      - ./backups:/backups
    command: >
      sh -c "
        mkdir -p /backups
        mysqldump -h mysql -u ${MYSQL_USER} ${MYSQL_DATABASE} > /backups/steerdock-$(date +%Y%m%d_%H%M%S).sql
        echo 'Backup completed: steerdock-$(date +%Y%m%d_%H%M%S).sql'
      "
    depends_on:
      mysql:
        condition: service_healthy
    networks:
      - steerdock-network

volumes:
  mysql_data:
    driver: local
  redis_data:
    driver: local
  steerdock_data:
    driver: local
  steerdock_logs:
    driver: local

networks:
  steerdock-network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.20.0.0/16