services:
  postgres:
    image: postgres:16-alpine
    security_opt: [apparmor=unconfined]
    restart: unless-stopped
    volumes:
      - pgdata:/var/lib/postgresql/data
    environment:
      POSTGRES_DB: aufmassweb
      POSTGRES_USER: aufmass
      POSTGRES_PASSWORD: ${DB_PASSWORD:-aufmass_secret}
    healthcheck:
      test: ["CMD", "pg_isready", "-U", "aufmass", "-d", "aufmassweb"]
      interval: 10s
      timeout: 5s
      retries: 5

  web:
    build: ./_aufmass_web
    security_opt: [apparmor=unconfined]
    restart: unless-stopped
    ports:
      - "5000:5000"
    volumes:
      - ./_aufmass_web/data:/app/data
      - ./daten:/app/daten
    environment:
      DATABASE_URL: postgresql://aufmass:${DB_PASSWORD:-aufmass_secret}@postgres:5432/aufmassweb
      SECRET_KEY: ${SECRET_KEY:-change-me-in-production}
      REGISTRATION_ENABLED: "false"
    depends_on:
      postgres:
        condition: service_healthy

volumes:
  pgdata: