docker-compose.yml

version: "3.9"

services:
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: openres
      POSTGRES_PASSWORD: openres
      POSTGRES_DB: openres
    ports:
      - "5432:5432"
    volumes:
      - openres_pg:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U openres"]
      interval: 5s
      timeout: 3s
      retries: 10

  app:
    build: .
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgresql://openres:openres@db:5432/openres?schema=public
      PUBLIC_BASE_URL: http://localhost:3000
      SUBJECT_PEPPER: change-me-in-production
      OIDC_COOKIE_SECRET: change-me-cookie-secret
      ADMIN_API_KEY: change-me-admin-key
      USSD_GATEWAY_SECRET: change-me-ussd-secret
      # One per relying party in config/countries. The app refuses to start if any is
      # missing rather than fall back to a placeholder derived from the public client id.
      HEALTH_CLIENT_SECRET: change-me-health-secret
      TAX_CLIENT_SECRET: change-me-tax-secret
      PERMITS_CLIENT_SECRET: change-me-permits-secret
      SUBSIDY_CLIENT_SECRET: change-me-subsidy-secret
    ports:
      - "3000:3000"
    # Direct CLI entry point, not npx: the runtime image ships no package manager
    # (see the Dockerfile). Compose has no init container, so unlike the Kubernetes
    # and Helm paths this single container migrates and then serves -- which is safe
    # here precisely because compose runs one of it.
    command: sh -c "./node_modules/.bin/prisma migrate deploy && node dist/main.js"

volumes:
  openres_pg: