# Arb Pulse — VPS deployment.
#
# Default (`docker compose up -d --build`): runs ONLY the app container, bound to
# 127.0.0.1:8080. Put it behind your existing reverse proxy (nginx/Caddy/Traefik)
# on the host — see deploy/nginx/arbpulse.wayool.com.conf. This is the right mode
# when the host already owns ports 80/443 for other apps.
#
# Optional bundled Caddy (`docker compose --profile caddy up -d --build`): only for
# a FRESH server with nothing else on 80/443; Caddy then handles automatic HTTPS.
#
# Requires a ./.env file (copy from .env.vps.example and fill DOMAIN + secrets).

services:
  app:
    build:
      context: ..
      dockerfile: Dockerfile
    image: arbpulse:latest
    container_name: arbpulse
    restart: unless-stopped
    env_file:
      - ./.env
    # Bind to loopback only; the host reverse proxy forwards public traffic here.
    ports:
      - "127.0.0.1:8080:8080"
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://127.0.0.1:8080/api/health"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 15s

  # Opt-in only via `--profile caddy`. Do NOT enable if the host already runs
  # nginx/another proxy on 80/443 — the ports would collide.
  caddy:
    image: caddy:2-alpine
    container_name: arbpulse-caddy
    restart: unless-stopped
    profiles: ["caddy"]
    depends_on:
      - app
    ports:
      - "80:80"
      - "443:443"
    environment:
      - DOMAIN=${DOMAIN}
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy_data:/data
      - caddy_config:/config

volumes:
  caddy_data:
  caddy_config: