services:
  bookorbit:
    container_name: bookorbit-app
    image: ghcr.io/bookorbit/bookorbit:latest
    restart: unless-stopped
    init: true
    ports:
      - "3000:3000"
    environment:
      NODE_ENV: production
      PORT: 3000
      POSTGRES_HOST: postgres
      POSTGRES_PORT: 5432
      POSTGRES_USER: bookorbit
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: bookorbit
      JWT_SECRET: ${JWT_SECRET}
      SETUP_BOOTSTRAP_TOKEN: ${SETUP_BOOTSTRAP_TOKEN}
      APP_URL: https://libri.tuodominio.it
      CLIENT_URL: https://libri.tuodominio.it
      PUID: 1000
      PGID: 1000
      NODE_MAX_OLD_SPACE_SIZE: 2048
    depends_on:
      postgres:
        condition: service_healthy
    volumes:
      - ./books:/books
      - ./data/app:/data
      - ./data/app/book-dock:/data/book-dock
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - SETGID
      - SETUID
    security_opt:
      - no-new-privileges:true
    stop_grace_period: 30s
    healthcheck:
      test:
        [
          "CMD-SHELL",
          'node -e "fetch(''http://127.0.0.1:3000/api/v1/health'').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"',
        ]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 20s
 
  postgres:
    container_name: bookorbit-db
    image: pgvector/pgvector:pg16@sha256:7d400e340efb42f4d8c9c12c6427adb253f726881a9985d2a471bf0eed824dff
    restart: unless-stopped
    environment:
      POSTGRES_USER: bookorbit
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: bookorbit
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    healthcheck:
      test:
        ["CMD-SHELL", 'pg_isready -U "$${POSTGRES_USER}" -d "$${POSTGRES_DB}"']
      interval: 10s
      timeout: 5s
      retries: 10
      start_period: 20s