# =============================================================================
# SurfSense — Development Docker Compose
# =============================================================================
# Usage (from repo root):
#   docker compose -f docker/docker-compose.dev.yml up --build
#
# This file builds from source and includes dev tools like pgAdmin.
# For production with prebuilt images, use docker/docker-compose.yml instead.
# =============================================================================

name: surfsense

services:
  db:
    image: pgvector/pgvector:pg17
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./postgresql.conf:/etc/postgresql/postgresql.conf:ro
      - ./scripts/init-electric-user.sh:/docker-entrypoint-initdb.d/init-electric-user.sh:ro
    environment:
      - POSTGRES_USER=${DB_USER:-postgres}
      - POSTGRES_PASSWORD=${DB_PASSWORD:-postgres}
      - POSTGRES_DB=${DB_NAME:-surfsense}
      - ELECTRIC_DB_USER=${ELECTRIC_DB_USER:-electric}
      - ELECTRIC_DB_PASSWORD=${ELECTRIC_DB_PASSWORD:-electric_password}
    command: postgres -c config_file=/etc/postgresql/postgresql.conf
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-postgres} -d ${DB_NAME:-surfsense}"]
      interval: 10s
      timeout: 5s
      retries: 5

  pgadmin:
    image: dpage/pgadmin4
    ports:
      - "${PGADMIN_PORT:-5050}:80"
    environment:
      - PGADMIN_DEFAULT_EMAIL=${PGADMIN_DEFAULT_EMAIL:-admin@surfsense.com}
      - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_DEFAULT_PASSWORD:-surfsense}
    volumes:
      - pgadmin_data:/var/lib/pgadmin
    depends_on:
      - db

  redis:
    image: redis:8-alpine
    ports:
      - "${REDIS_PORT:-6379}:6379"
    volumes:
      - redis_data:/data
    command: redis-server --appendonly yes
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  backend:
    build: ../surfsense_backend
    ports:
      - "${BACKEND_PORT:-8000}:8000"
    volumes:
      - ../surfsense_backend/app:/app/app
      - shared_temp:/shared_tmp
    env_file:
      - ../surfsense_backend/.env
    environment:
      - DATABASE_URL=${DATABASE_URL:-postgresql+asyncpg://${DB_USER:-postgres}:${DB_PASSWORD:-postgres}@${DB_HOST:-db}:${DB_PORT:-5432}/${DB_NAME:-surfsense}}
      - CELERY_BROKER_URL=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_RESULT_BACKEND=${REDIS_URL:-redis://redis:6379/0}
      - REDIS_APP_URL=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_TASK_DEFAULT_QUEUE=surfsense
      - PYTHONPATH=/app
      - UVICORN_LOOP=asyncio
      - UNSTRUCTURED_HAS_PATCHED_LOOP=1
      - LANGCHAIN_TRACING_V2=false
      - LANGSMITH_TRACING=false
      - ELECTRIC_DB_USER=${ELECTRIC_DB_USER:-electric}
      - ELECTRIC_DB_PASSWORD=${ELECTRIC_DB_PASSWORD:-electric_password}
      - AUTH_TYPE=${AUTH_TYPE:-LOCAL}
      - NEXT_FRONTEND_URL=${NEXT_FRONTEND_URL:-http://localhost:3000}
      # Daytona Sandbox – uncomment and set credentials to enable cloud code execution
      # - DAYTONA_SANDBOX_ENABLED=TRUE
      # - DAYTONA_API_KEY=${DAYTONA_API_KEY:-}
      # - DAYTONA_API_URL=${DAYTONA_API_URL:-https://app.daytona.io/api}
      # - DAYTONA_TARGET=${DAYTONA_TARGET:-us}
      - SERVICE_ROLE=api
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
      interval: 15s
      timeout: 5s
      retries: 30
      start_period: 200s

  celery_worker:
    build: ../surfsense_backend
    volumes:
      - ../surfsense_backend/app:/app/app
      - shared_temp:/shared_tmp
    env_file:
      - ../surfsense_backend/.env
    environment:
      - DATABASE_URL=${DATABASE_URL:-postgresql+asyncpg://${DB_USER:-postgres}:${DB_PASSWORD:-postgres}@${DB_HOST:-db}:${DB_PORT:-5432}/${DB_NAME:-surfsense}}
      - CELERY_BROKER_URL=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_RESULT_BACKEND=${REDIS_URL:-redis://redis:6379/0}
      - REDIS_APP_URL=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_TASK_DEFAULT_QUEUE=surfsense
      - PYTHONPATH=/app
      - ELECTRIC_DB_USER=${ELECTRIC_DB_USER:-electric}
      - ELECTRIC_DB_PASSWORD=${ELECTRIC_DB_PASSWORD:-electric_password}
      - SERVICE_ROLE=worker
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
      backend:
        condition: service_healthy

  celery_beat:
    build: ../surfsense_backend
    env_file:
      - ../surfsense_backend/.env
    environment:
      - DATABASE_URL=${DATABASE_URL:-postgresql+asyncpg://${DB_USER:-postgres}:${DB_PASSWORD:-postgres}@${DB_HOST:-db}:${DB_PORT:-5432}/${DB_NAME:-surfsense}}
      - CELERY_BROKER_URL=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_RESULT_BACKEND=${REDIS_URL:-redis://redis:6379/0}
      - CELERY_TASK_DEFAULT_QUEUE=surfsense
      - PYTHONPATH=/app
      - SERVICE_ROLE=beat
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
      celery_worker:
        condition: service_started

  # flower:
  #   build: ../surfsense_backend
  #   ports:
  #     - "${FLOWER_PORT:-5555}:5555"
  #   env_file:
  #     - ../surfsense_backend/.env
  #   environment:
  #     - CELERY_BROKER_URL=${REDIS_URL:-redis://redis:6379/0}
  #     - CELERY_RESULT_BACKEND=${REDIS_URL:-redis://redis:6379/0}
  #     - PYTHONPATH=/app
  #   command: celery -A app.celery_app flower --port=5555
  #   depends_on:
  #     - redis
  #     - celery_worker

  electric:
    image: electricsql/electric:1.4.10
    ports:
      - "${ELECTRIC_PORT:-5133}:3000"
    # depends_on:
    #   - db
    environment:
      - DATABASE_URL=${ELECTRIC_DATABASE_URL:-postgresql://${ELECTRIC_DB_USER:-electric}:${ELECTRIC_DB_PASSWORD:-electric_password}@${DB_HOST:-db}:${DB_PORT:-5432}/${DB_NAME:-surfsense}?sslmode=${DB_SSLMODE:-disable}}
      - ELECTRIC_INSECURE=true
      - ELECTRIC_WRITE_TO_PG_MODE=direct
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/v1/health"]
      interval: 10s
      timeout: 5s
      retries: 5

  frontend:
    build:
      context: ../surfsense_web
      args:
        NEXT_PUBLIC_FASTAPI_BACKEND_URL: ${NEXT_PUBLIC_FASTAPI_BACKEND_URL:-http://localhost:8000}
        NEXT_PUBLIC_FASTAPI_BACKEND_AUTH_TYPE: ${NEXT_PUBLIC_FASTAPI_BACKEND_AUTH_TYPE:-LOCAL}
        NEXT_PUBLIC_ETL_SERVICE: ${NEXT_PUBLIC_ETL_SERVICE:-DOCLING}
        NEXT_PUBLIC_ELECTRIC_URL: ${NEXT_PUBLIC_ELECTRIC_URL:-http://localhost:5133}
        NEXT_PUBLIC_ELECTRIC_AUTH_MODE: ${NEXT_PUBLIC_ELECTRIC_AUTH_MODE:-insecure}
        NEXT_PUBLIC_DEPLOYMENT_MODE: ${NEXT_PUBLIC_DEPLOYMENT_MODE:-self-hosted}
    ports:
      - "${FRONTEND_PORT:-3000}:3000"
    env_file:
      - ../surfsense_web/.env
    depends_on:
      backend:
        condition: service_healthy
      electric:
        condition: service_healthy

volumes:
  postgres_data:
    name: surfsense-postgres
  pgadmin_data:
    name: surfsense-pgadmin
  redis_data:
    name: surfsense-redis
  shared_temp:
    name: surfsense-shared-temp