docker-compose.yml

services:
  # PostgreSQL Database Service
  db:
    image: pgvector/pgvector:pg16
    container_name: ai-reviewer-db

    restart: unless-stopped
    environment:
      POSTGRES_DB: ai_reviewer
      POSTGRES_USER: ai_reviewer_user
      POSTGRES_PASSWORD: ai_reviewer_password
      PGDATA: /var/lib/postgresql/data/pgdata
    ports:
      - "5432:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ai_reviewer_user -d ai_reviewer"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    networks:
      - app_network

  # Backend Application Service
  api:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: ai-reviewer-api
    restart: unless-stopped
    ports:
      - "8000:8000"
    environment:
      - DATABASE_URL=postgresql://ai_reviewer_user:ai_reviewer_password@db:5432/ai_reviewer
    env_file:
      - .env
    volumes:
      - ./uploads:/app/uploads
    depends_on:
      - db
    networks:
      - app_network

  # Frontend Application Service
  app:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    container_name: ai-reviewer-app
    restart: unless-stopped
    ports:
      - "3000:3000"
    # The image leaves out .env files, so Auth.js gets its settings here, from the
    # root .env: the same keys k8s/frontend.yaml passes. AUTH_URL is the browser's
    # address for the app; without it, production Auth.js rejects every request.
    environment:
      - NODE_ENV=production
      - API_INTERNAL_URL=http://api:8000
      - AUTH_URL=http://localhost:3000
      - AUTH_SECRET=${AUTH_SECRET:-}
      - AUTH_GOOGLE_ID=${AUTH_GOOGLE_ID:-}
      - AUTH_GOOGLE_SECRET=${AUTH_GOOGLE_SECRET:-}
      - AUTH_MICROSOFT_ENTRA_ID_ID=${AUTH_MICROSOFT_ENTRA_ID_ID:-}
      - AUTH_MICROSOFT_ENTRA_ID_SECRET=${AUTH_MICROSOFT_ENTRA_ID_SECRET:-}
      - AUTH_MICROSOFT_ENTRA_ID_ISSUER=${AUTH_MICROSOFT_ENTRA_ID_ISSUER:-}
    depends_on:
      - api
    networks:
      - app_network

volumes:
  postgres_data:
    driver: local

networks:
  app_network:
    driver: bridge