version: "3.9"
volumes:
  manifest_postgres:
  redis_data:
  shared:
services:
  api:
    image: taqtile.azurecr.io/manifest-api-production:3.1
    depends_on:
      - dbpostgres
    ports:
      - "3000"
      - "4000"
    expose:
      - "3000"
      - "4000"
    links:
      - dbpostgres
    volumes:
      - </put/path/to/file/storage/here>:/uploads
      - shared:/shared
    environment:
      POSTGRES_PORT: "5432"
      POSTGRES_HOST: "dbpostgres"
      POSTGRES_PASSWORD: "dnhrfw2ufbbto3!mritbfwl" # Change for production use
      POSTGRES_USER: "manifest"
      NODE_ENV: "localhost"
      IP_ACCESS: "<PUT_VM_IP_ADDRESS>"
      ADMIN_EMAIL: "<PUT_ADMIN_EMAIL>"
      ADMIN_PASSWORD: "<PUT_ADMIN_PASSWORD>"
      env: "on-prem"
      LICENSE_KEY: "<PUT_LICENSE_KEY>"
      POSTGRES_MAIN_DB: "manifestmain"
      MAIL_API_KEY: "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"
      POSTGRES_SSL: "false"
      HOST: "<PUT_VM_IP_ADDRESS>"
      PROTOCOL: "https://"
      SERVER_DOCKER: "true"
      BCRYPT_SALT_ROUNDS: "10"
      AUTH_TOKEN_SECRET: "keySecretToken"
      FILES_UPLOAD_FOLDER: "/uploads/"
      FILES_IMPORT_DATA: "/uploads/importData/"
      MAIL_SERVICE_NAME: "SendGrid"
      REDIS_HOST: redis
      REDIS_PORT: "6379"
      ROOT_ADMIN_EMAIL: "<PUT_ADMIN_EMAIL>"
      ROOT_ADMIN_PASSWORD: "<PUT_ADMIN_PASSWORD>"
      MIGRATION_REQUIRED: "true"
      SERVER_PORT: "3000"
      DEPLOYMENT_TYPE: "on-prem"
      DB_LOGS_ENABLED: true # set to false for production use

    restart: on-failure
  dbpostgres:
    image: postgres:14.9-alpine
    volumes:
      - manifest_postgres:/var/lib/postgresql/data
    ports:
      - "5432"
    environment:
      - POSTGRES_USER=manifest
      - POSTGRES_PASSWORD=dnhrfw2ufbbto3!mritbfwl # Change for production use
      - POSTGRES_DB=manifestmain
  web:
    image: taqtile.azurecr.io/manifest-web-production:3.1_a
    user: 0:0
    depends_on:
      - api
    volumes:
      - </put/path/to/file/storage/here>:/usr/share/nginx/html/uploads
      - </put/path/to/nginx/cert/storage/here>:/etc/ssl/private/
      - </put/path/to/nginx/cert/storage/here>:/etc/ssl/certs
      - shared:/shared
    ports:
      - "80:80"
      - "443:443"
    environment:
      - NGINX_HOST=localhost
      - NGINX_PORT=80
      - IP_ACCESS="<PUT_VM_IP_ADDRESS>"
      - env=on-prem
      - EXTERNAL_HOST=localhost 
    links:
      - api
    restart: on-failure

  manifestCoturn:
    image: taqtile.azurecr.io/manifest-coturn
    network_mode: "host"
  converter:
    image: taqtile.azurecr.io/manifest-3dconverter-production:3.0.4
    volumes:
      - </put/path/to/file/storage/here>:/manifest-cs/folder
    ports:
      - "5555"
    expose:
      - "5555"
    restart: on-failure
  redis:
    image: docker.io/bitnami/redis:7.2
    environment:
      # ALLOW_EMPTY_PASSWORD is recommended only for development.
      - ALLOW_EMPTY_PASSWORD=yes
      - REDIS_DISABLE_COMMANDS=FLUSHDB
    ports:
      - '6379:6379'
    volumes:
      - 'redis_data:/bitnami/redis/data'