docker-compose.prod.yml

services:
  # PostgreSQL Database
  db:
    image: postgres:16-alpine
    container_name: quietpage_db_prod
    environment:
      POSTGRES_DB: ${DB_NAME}
      POSTGRES_USER: ${DB_USER}
      POSTGRES_PASSWORD: ${DB_PASSWORD}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USER}"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - quietpage_network
    restart: unless-stopped

  # Redis Cache & Celery Broker
  redis:
    image: redis:7-alpine
    container_name: quietpage_redis_prod
    command: redis-server --appendonly yes
    volumes:
      - redis_data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - quietpage_network
    restart: unless-stopped

  # Django Web Application
  web:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: quietpage_web_prod
    command: gunicorn config.wsgi:application --bind 0.0.0.0:8000 --workers 4 --timeout 30 --access-logfile - --error-logfile -
    environment:
      - DJANGO_SETTINGS_MODULE=config.settings.production
      - SECRET_KEY=${SECRET_KEY}
      - FERNET_KEY_PRIMARY=${FERNET_KEY_PRIMARY}
      - ALLOWED_HOSTS=${ALLOWED_HOSTS}
      - DB_ENGINE=django.db.backends.postgresql
      - DB_NAME=${DB_NAME}
      - DB_USER=${DB_USER}
      - DB_PASSWORD=${DB_PASSWORD}
      - DB_HOST=db
      - DB_PORT=5432
      - REDIS_URL=redis://redis:6379/1
      - CELERY_BROKER_URL=redis://redis:6379/0
      - CELERY_RESULT_BACKEND=redis://redis:6379/0
      - EMAIL_HOST=${EMAIL_HOST}
      - EMAIL_PORT=${EMAIL_PORT}
      - EMAIL_USE_TLS=${EMAIL_USE_TLS}
      - EMAIL_HOST_USER=${EMAIL_HOST_USER}
      - EMAIL_HOST_PASSWORD=${EMAIL_HOST_PASSWORD}
      - DEFAULT_FROM_EMAIL=${DEFAULT_FROM_EMAIL}
      - SITE_URL=${SITE_URL}
      - SENTRY_DSN=${SENTRY_DSN:-}
      - BACKUPS_PATH=/app/backups
    volumes:
      - ./logs:/app/logs
      - ./media:/app/media
      - static_volume:/app/staticfiles
      - backups_data:/app/backups
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/api/health/')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s
    networks:
      - quietpage_network
    restart: unless-stopped

  # Celery Worker
  celery_worker:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: quietpage_celery_worker_prod
    command: celery -A config worker --loglevel=info --concurrency=4
    environment:
      - DJANGO_SETTINGS_MODULE=config.settings.production
      - SECRET_KEY=${SECRET_KEY}
      - FERNET_KEY_PRIMARY=${FERNET_KEY_PRIMARY}
      - DB_ENGINE=django.db.backends.postgresql
      - DB_NAME=${DB_NAME}
      - DB_USER=${DB_USER}
      - DB_PASSWORD=${DB_PASSWORD}
      - DB_HOST=db
      - DB_PORT=5432
      - REDIS_URL=redis://redis:6379/1
      - CELERY_BROKER_URL=redis://redis:6379/0
      - CELERY_RESULT_BACKEND=redis://redis:6379/0
      - SENTRY_DSN=${SENTRY_DSN:-}
      - BACKUPS_PATH=/app/backups
    volumes:
      - ./logs:/app/logs
      - ./media:/app/media
      - backups_data:/app/backups
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy
      web:
        condition: service_healthy
    networks:
      - quietpage_network
    restart: unless-stopped

  # Celery Beat Scheduler
  celery_beat:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: quietpage_celery_beat_prod
    command: celery -A config beat --loglevel=info --schedule=/app/var/celerybeat/celerybeat-schedule
    environment:
      - DJANGO_SETTINGS_MODULE=config.settings.production
      - SECRET_KEY=${SECRET_KEY}
      - FERNET_KEY_PRIMARY=${FERNET_KEY_PRIMARY}
      - DB_ENGINE=django.db.backends.postgresql
      - DB_NAME=${DB_NAME}
      - DB_USER=${DB_USER}
      - DB_PASSWORD=${DB_PASSWORD}
      - DB_HOST=db
      - DB_PORT=5432
      - REDIS_URL=redis://redis:6379/1
      - CELERY_BROKER_URL=redis://redis:6379/0
      - CELERY_RESULT_BACKEND=redis://redis:6379/0
    volumes:
      - ./logs:/app/logs
      - celerybeat_schedule:/app/var/celerybeat
    depends_on:
      redis:
        condition: service_healthy
    networks:
      - quietpage_network
    restart: unless-stopped

  # Nginx Reverse Proxy
  nginx:
    image: nginx:alpine
    container_name: quietpage_nginx
    environment:
      - DOMAIN=${DOMAIN}
      - EMAIL=${EMAIL}
      - HSTS_HEADER=${HSTS_HEADER:-}
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/conf.d/quietpage.conf.template:/etc/nginx/templates/quietpage.conf.template:ro
      - static_volume:/app/staticfiles:ro
      - ./media:/app/media:ro
      - certbot_conf:/etc/letsencrypt
      - certbot_www:/var/www/certbot
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      - web
    networks:
      - quietpage_network
    restart: unless-stopped
    command: "/bin/sh -c 'envsubst \"$$DOMAIN $$HSTS_HEADER\" < /etc/nginx/templates/quietpage.conf.template > /etc/nginx/conf.d/quietpage.conf && while :; do sleep 6h & wait $${!}; nginx -s reload; done & nginx -g \"daemon off;\"'"

  # Certbot for SSL Certificates
  certbot:
    image: certbot/certbot
    container_name: quietpage_certbot
    environment:
      - DOMAIN=${DOMAIN}
      - EMAIL=${EMAIL}
    volumes:
      - certbot_conf:/etc/letsencrypt
      - certbot_www:/var/www/certbot
    entrypoint: "/bin/sh -c 'trap exit TERM; if [ ! -d \"/etc/letsencrypt/live/$$DOMAIN\" ]; then certbot certonly --webroot --webroot-path=/var/www/certbot -d $$DOMAIN --email $$EMAIL --agree-tos --no-eff-email --non-interactive || true; fi; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
    networks:
      - quietpage_network
    restart: unless-stopped

volumes:
  postgres_data:
  redis_data:
  static_volume:
  celerybeat_schedule:
  certbot_conf:
  certbot_www:
  backups_data:

networks:
  quietpage_network:
    driver: bridge