docker-compose.yml

# Dev-стек HealthPage: инфраструктура + api-сервис.
# Логические связи сервисов/очередей — в DESIGN.md §8/§8.1, здесь только развёртывание.
# Запуск: cp .env.example .env && docker compose up -d
#
# RabbitMQ собирается из docker/rabbitmq/Dockerfile — базовый образ + плагин
# rabbitmq_delayed_message_exchange (DESIGN §8.1). Топология (exchange'и/очереди) объявляется
# командой `queue-setup`, идемпотентно: docker compose run --rm --entrypoint /app/queue-setup api.

services:
  postgres:
    image: postgres:16-alpine
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-healthpage}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-healthpage}
      POSTGRES_DB: ${POSTGRES_DB:-healthpage}
    ports:
      - "5432:5432"
    volumes:
      - pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-healthpage} -d ${POSTGRES_DB:-healthpage}"]
      interval: 5s
      timeout: 5s
      retries: 10

  redis:
    image: redis:7-alpine
    ports:
      - "6379:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 5s
      timeout: 5s
      retries: 10

  rabbitmq:
    build:
      context: ./docker/rabbitmq
    environment:
      RABBITMQ_DEFAULT_USER: ${RABBITMQ_DEFAULT_USER:-healthpage}
      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_DEFAULT_PASS:-healthpage}
    ports:
      - "5672:5672"
      - "15672:15672"
    healthcheck:
      test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
      interval: 10s
      timeout: 10s
      retries: 10

  api:
    build:
      context: ./backend
    environment:
      APP_ENV: ${APP_ENV:-dev}
      HTTP_PORT: ${HTTP_PORT:-8080}
      BASE_URL: ${BASE_URL:-http://localhost:8080}
      DATABASE_URL: ${DATABASE_URL}
      REDIS_URL: ${REDIS_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
      JWT_SECRET: ${JWT_SECRET}
      ACCESS_TTL: ${ACCESS_TTL:-15m}
      REFRESH_TTL: ${REFRESH_TTL:-720h}
      SUBSCRIPTION_SECRET: ${SUBSCRIPTION_SECRET:-}
      SLACK_CLIENT_ID: ${SLACK_CLIENT_ID:-}
      SLACK_CLIENT_SECRET: ${SLACK_CLIENT_SECRET:-}
      PREMIUM_MONTHLY_MINOR: ${PREMIUM_MONTHLY_MINOR:-}
      PREMIUM_YEARLY_DISCOUNT_PCT: ${PREMIUM_YEARLY_DISCOUNT_PCT:-}
      BILLING_CURRENCY: ${BILLING_CURRENCY:-}
      TRIAL_DAYS: ${TRIAL_DAYS:-}
      YOOKASSA_SHOP_ID: ${YOOKASSA_SHOP_ID:-}
      YOOKASSA_SECRET_KEY: ${YOOKASSA_SECRET_KEY:-}
    ports:
      - "${HTTP_PORT:-8080}:8080"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "/app/api", "-health"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Воркер доставки email-уведомлений (этап 3.4): потребляет q.email.
  worker-email:
    build:
      context: ./backend
    entrypoint: ["/app/worker-email"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      BASE_URL: ${BASE_URL:-http://localhost:8080}
      DATABASE_URL: ${DATABASE_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
      JWT_SECRET: ${JWT_SECRET}
      SUBSCRIPTION_SECRET: ${SUBSCRIPTION_SECRET:-}
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-587}
      SMTP_USERNAME: ${SMTP_USERNAME:-}
      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
      SMTP_FROM: ${SMTP_FROM:-}
      SMTP_TLS: ${SMTP_TLS:-}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy

  # Воркер канала Telegram (этап 3.7): потребляет q.telegram (доставка) и держит бота
  # подписки (long-poll getUpdates: /start <slug>, /stop). Требует TELEGRAM_BOT_TOKEN.
  worker-telegram:
    build:
      context: ./backend
    entrypoint: ["/app/worker-telegram"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      BASE_URL: ${BASE_URL:-http://localhost:8080}
      DATABASE_URL: ${DATABASE_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
      TELEGRAM_BOT_TOKEN: ${TELEGRAM_BOT_TOKEN}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy

  # Воркер HTTP-доставки (этап 3.9): потребляет q.slack, шлёт Block Kit в incoming-webhook URL
  # канала. Секреты Slack OAuth не нужны (адрес сохранён при подписке). На 5.4 добавит q.webhook.out.
  worker-webhook:
    build:
      context: ./backend
    entrypoint: ["/app/worker-webhook"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      BASE_URL: ${BASE_URL:-http://localhost:8080}
      DATABASE_URL: ${DATABASE_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy

  # Рекуррентные списания и dunning (этап 6.4): периодический цикл по premium-подпискам с
  # истёкшим периодом. Без ключей ЮKassa использует stub-провайдер (dev, без реальных денег).
  worker-billing:
    build:
      context: ./backend
    entrypoint: ["/app/worker-billing"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      BASE_URL: ${BASE_URL:-http://localhost:8080}
      DATABASE_URL: ${DATABASE_URL}
      PREMIUM_MONTHLY_MINOR: ${PREMIUM_MONTHLY_MINOR:-}
      PREMIUM_YEARLY_DISCOUNT_PCT: ${PREMIUM_YEARLY_DISCOUNT_PCT:-}
      BILLING_CURRENCY: ${BILLING_CURRENCY:-}
      TRIAL_DAYS: ${TRIAL_DAYS:-}
      BILLING_SCAN_INTERVAL: ${BILLING_SCAN_INTERVAL:-}
      BILLING_MAX_DUNNING: ${BILLING_MAX_DUNNING:-}
      BILLING_RETRY_INTERVAL: ${BILLING_RETRY_INTERVAL:-}
      YOOKASSA_SHOP_ID: ${YOOKASSA_SHOP_ID:-}
      YOOKASSA_SECRET_KEY: ${YOOKASSA_SECRET_KEY:-}
    depends_on:
      postgres:
        condition: service_healthy

  # Асинхронный импорт из внешних сервисов (этап 7.5): потребляет q.import, MVP-источник StatusPal.
  worker-import:
    build:
      context: ./backend
    entrypoint: ["/app/worker-import"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      DATABASE_URL: ${DATABASE_URL}
      RABBITMQ_URL: ${RABBITMQ_URL}
    depends_on:
      postgres:
        condition: service_healthy
      rabbitmq:
        condition: service_healthy

  # ACME-выпуск/продление TLS кастомных доменов (этап 4.3.2). Требует публичной доступности
  # доменов на :80 (через edge) — в dev обычно не запускается; для прод задать ACME_EMAIL.
  tls-manager:
    build:
      context: ./backend
    entrypoint: ["/app/tls-manager"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      DATABASE_URL: ${DATABASE_URL}
      ACME_EMAIL: ${ACME_EMAIL:-}
      ACME_DIRECTORY_URL: ${ACME_DIRECTORY_URL:-https://acme-v02.api.letsencrypt.org/directory}
    depends_on:
      postgres:
        condition: service_healthy
    profiles: ["edge"]

  # Edge-прокси кастомных доменов (этап 4.3.3): TLS по SNI + HTTP-01 + роутинг по Host.
  edge:
    build:
      context: ./backend
    entrypoint: ["/app/edge"]
    environment:
      APP_ENV: ${APP_ENV:-dev}
      DATABASE_URL: ${DATABASE_URL}
      EDGE_API_URL: ${EDGE_API_URL:-http://api:8080}
      EDGE_SSR_URL: ${EDGE_SSR_URL:-http://public-ssr:3000}
    ports:
      - "80:80"
      - "443:443"
    depends_on:
      postgres:
        condition: service_healthy
    profiles: ["edge"]

volumes:
  pgdata: