docker-compose.yml

services:
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
      args:
        - ENV=production
    env_file:
      - .envs/local/backend.production.env
    image: ${DOCKER_IMAGE_BACKEND:-simboard-backend}
    restart: always
    environment:
      ENV: production
      ENVIRONMENT: production
      PORT: "8000"
      STACK_NAME: simboard

      DOMAIN: ${DOMAIN:-localhost}
      FRONTEND_ORIGIN: ${FRONTEND_ORIGIN:-https://localhost:5173}
      FRONTEND_AUTH_REDIRECT_URL: ${FRONTEND_AUTH_REDIRECT_URL:-https://localhost:5173/auth/callback}
      GITHUB_REDIRECT_URL: ${GITHUB_REDIRECT_URL:-https://localhost/api/v1/auth/github/callback}

      COOKIE_NAME: simboard_auth
      COOKIE_SECURE: "true"
      COOKIE_HTTPONLY: "true"
      COOKIE_SAMESITE: lax
      COOKIE_MAX_AGE: "3600"

      # Required in all environments.
      # In production (NERSC Spin), this is injected by the platform.
      # For local parity, provide via .env or shell.
      DATABASE_URL: ${DATABASE_URL:?DATABASE_URL must be set}

    expose:
      - "8000"
    volumes: []
    networks:
      - default
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "-", "https://localhost:8000/api/v1/health"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 10s

  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        - NODE_ENV=production
    image: ${DOCKER_IMAGE_FRONTEND:-simboard-frontend}
    restart: always
    ports:
      - "8080:80"
    expose:
      - "80"
    depends_on:
      - backend
    networks:
      - default