docker-compose.yml

services:
  # ===========================================
  # Infrastructure Services
  # ===========================================
  postgres:
    image: postgres:16-alpine
    container_name: keywai_postgres
    restart: always
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-keywai}
      POSTGRES_USER: ${POSTGRES_USER:-keywai}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-keywai_secret}
    ports:
      # 127.0.0.1: БД не должна торчать наружу — доступ только с хоста
      - "127.0.0.1:${POSTGRES_PORT:-5432}:5432"
    volumes:
      # Bind mount - data persists on host filesystem
      - ./data/postgres:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-keywai} -d ${POSTGRES_DB:-keywai}"]
      interval: 10s
      timeout: 5s
      retries: 5

  redis:
    image: redis:7-alpine
    container_name: keywai_redis
    restart: always
    ports:
      # 127.0.0.1: Redis без auth — доступ только с хоста
      - "127.0.0.1:${REDIS_PORT:-6379}:6379"
    volumes:
      # Bind mount - data persists on host filesystem
      - ./data/redis:/data
    command: redis-server --appendonly yes
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Mailpit - dev SMTP server (catches outgoing emails, web UI on 8025)
  mailpit:
    image: axllent/mailpit:latest
    container_name: keywai_mailpit
    restart: unless-stopped
    ports:
      # 127.0.0.1: web UI показывает ВСЕ письма (вкл. токены сброса пароля)
      - "127.0.0.1:1025:1025"  # SMTP
      - "127.0.0.1:8025:8025"  # Web UI
    environment:
      MP_SMTP_AUTH_ACCEPT_ANY: 1
      MP_SMTP_AUTH_ALLOW_INSECURE: 1
      MP_MAX_MESSAGES: 5000

  # ===========================================
  # Application Services
  # ===========================================
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: keywai_backend
    restart: always
    # Entrypoint: ждёт postgres, генерирует недостающие ключи, применяет миграции
    entrypoint: ["/bin/sh", "/app/docker/entrypoint.sh"]
    command: python manage.py runserver 0.0.0.0:8000
    ports:
      - "8000:8000"
    volumes:
      - ./backend:/app
      # Shared config (AI models)
      - ./shared:/shared
      # Static files
      - ./data/static:/app/staticfiles
      # Auto-generated keys (DJANGO_SECRET_KEY / FERNET_KEY) persist here
      - ./data/keys:/keys
      # Media served from backend/media/ via ./backend:/app mount
    env_file:
      # Optional: свежий форк стартует без backend/.env (ключи сгенерируются)
      - path: ./backend/.env
        required: false
    environment:
      # SERVICE_ROLE=backend — единственный, кто гоняет migrate и генерирует ключи
      - SERVICE_ROLE=backend
      - DB_HOST=postgres
      # Дефолты совпадают с сервисом postgres — фреш-форк работает без .env
      - DB_NAME=${POSTGRES_DB:-keywai}
      - DB_USER=${POSTGRES_USER:-keywai}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-keywai_secret}
      - REDIS_URL=redis://redis:6379/0
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/api/v1/health/')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s

  # WebSocket server (ASGI) for real-time updates
  # Handles WebSocket connections for progress tracking
  daphne:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: keywai_daphne
    restart: always
    entrypoint: ["/bin/sh", "/app/docker/entrypoint.sh"]
    command: daphne -b 0.0.0.0 -p 8001 config.asgi:application
    ports:
      - "8001:8001"
    volumes:
      - ./backend:/app
      - ./shared:/shared
      - ./data/keys:/keys
      # Media served from backend/media/ via ./backend:/app mount
    env_file:
      - path: ./backend/.env
        required: false
    environment:
      - DB_HOST=postgres
      - DB_NAME=${POSTGRES_DB:-keywai}
      - DB_USER=${POSTGRES_USER:-keywai}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-keywai_secret}
      - REDIS_URL=redis://redis:6379/0
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      # Ждём backend healthy: миграции применены, ключи сгенерированы
      backend:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "python", "-c", "import socket; s=socket.socket(); s.connect(('localhost', 8001)); s.close()"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 20s

  # ===========================================
  # Celery Workers (Priority Queues)
  # ===========================================

  # HIGH priority: User-facing tasks (parsing, clustering, competitors, content)
  # These tasks are triggered by user actions and should be processed immediately
  celery-high:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: keywai_celery_high
    restart: always
    entrypoint: ["/bin/sh", "/app/docker/entrypoint.sh"]
    command: celery -A config worker -Q high,celery --concurrency=4 --loglevel=info -n worker-high@%h
    volumes:
      - ./backend:/app
      - ./shared:/shared
      - ./data/keys:/keys
      # Media served from backend/media/ via ./backend:/app mount
    env_file:
      - path: ./backend/.env
        required: false
    environment:
      - DB_HOST=postgres
      - DB_NAME=${POSTGRES_DB:-keywai}
      - DB_USER=${POSTGRES_USER:-keywai}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-keywai_secret}
      - REDIS_URL=redis://redis:6379/0
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      backend:
        condition: service_healthy
    healthcheck:
      # CMD-SHELL: $$HOSTNAME нужен shell для раскрытия (exec-форма слала литерал)
      test: ["CMD-SHELL", "celery -A config inspect ping -d worker-high@$$HOSTNAME"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

  # LOW priority: Background tasks (cache collection, cleanup, quota sync)
  # These tasks run in the background and should not block user tasks
  celery-low:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: keywai_celery_low
    restart: always
    entrypoint: ["/bin/sh", "/app/docker/entrypoint.sh"]
    command: celery -A config worker -Q low --concurrency=2 --loglevel=info -n worker-low@%h
    volumes:
      - ./backend:/app
      - ./shared:/shared
      - ./data/keys:/keys
      # Media served from backend/media/ via ./backend:/app mount
    env_file:
      - path: ./backend/.env
        required: false
    environment:
      - DB_HOST=postgres
      - DB_NAME=${POSTGRES_DB:-keywai}
      - DB_USER=${POSTGRES_USER:-keywai}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-keywai_secret}
      - REDIS_URL=redis://redis:6379/0
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      backend:
        condition: service_healthy
    healthcheck:
      test: ["CMD-SHELL", "celery -A config inspect ping -d worker-low@$$HOSTNAME"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

  celery-beat:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: keywai_celery_beat
    restart: always
    entrypoint: ["/bin/sh", "/app/docker/entrypoint.sh"]
    command: celery -A config beat --loglevel=info
    volumes:
      - ./backend:/app
      - ./shared:/shared
      - ./data/keys:/keys
    env_file:
      - path: ./backend/.env
        required: false
    environment:
      - DB_HOST=postgres
      - DB_NAME=${POSTGRES_DB:-keywai}
      - DB_USER=${POSTGRES_USER:-keywai}
      - DB_PASSWORD=${POSTGRES_PASSWORD:-keywai_secret}
      - REDIS_URL=redis://redis:6379/0
      - REDIS_HOST=redis
      - REDIS_PORT=6379
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      backend:
        condition: service_healthy

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
    container_name: keywai_frontend
    restart: always
    ports:
      - "5173:5173"
    volumes:
      - ./frontend:/app
      - /app/node_modules
      - ./shared:/shared:ro
    depends_on:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "node -e \"require('http').get('http://localhost:5173', (r) => process.exit(r.statusCode === 200 ? 0 : 1)).on('error', () => process.exit(1))\""]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

# No more named volumes - all data in ./data/ directory