docker-compose.yml

services:
  # base services - redis, postgres

  redis:
    image: redis/redis-stack:latest
    container_name: redis
    restart: always
    ports:
      - "6379:6379"
      - "8001:8001"
    healthcheck:
      test: [ "CMD", "redis-cli", "ping" ]
      interval: "5s"
    volumes:
      - ./docker/redis/data:/data:rw
    profiles:
      - redis
      - base
      - dev
      - all

  postgres:
    image: postgres:15
    container_name: postgres
    restart: always
    ports:
      - "5432:5432"
    environment:
      POSTGRES_USER: postgres
      PGUSER: postgres
      POSTGRES_PASSWORD: postgres
      ADDITIONAL_DATABASES: kratos
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U postgres -d postgres" ]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - ./docker/postgres/data:/var/lib/postgresql/data:rw
      - ./docker/postgres/scripts:/docker-entrypoint-initdb.d
    profiles:
      - postgres
      - base
      - dev
      - all

  # files service - local aws alternative, use this or file-storage

  localstack:
    container_name: "${LOCALSTACK_DOCKER_NAME:-localstack}"
    image: localstack/localstack:latest
    ports:
      - "127.0.0.1:4566:4566" # LocalStack Gateway
      # - "127.0.0.1:4567:4566"
      - "127.0.0.1:4510-4559:4510-4559"
    environment:
      # LocalStack configuration: https://docs.localstack.cloud/references/configuration/
      - LOCALSTACK_AUTH_TOKEN=${LOCALSTACK_AUTH_TOKEN:-}
      - DEBUG=${DEBUG:-0}
      - SERVICES=s3:4566
      - HOSTNAME=localstack
      - HOSTNAME_EXTERNAL=localstack
      - DEFAULT_REGION=us-east-2
      - DISABLE_CUSTOM_CORS_S3=true
      - DISABLE_CORS_CHECKS=true
      - EXTRA_CORS_ALLOWED_ORIGINS=*
    volumes:
      - "./docker/localstack/scripts/init-aws.sh:/etc/localstack/init/ready.d/init-aws.sh" # ready hook
      - "./docker/localstack/data:/var/lib/localstack:rw"
      - "/var/run/docker.sock:/var/run/docker.sock:rw"
    profiles:
      - base
    networks:
      - host

  # quadratic services - client, api, multiplayer, files, connection

  quadratic-client:
    extends:
      file: docker-compose.${ECR_OR_BUILD}.yml
      service: quadratic-client
    container_name: client
    environment:
      VITE_DEBUG: 1
      VITE_QUADRATIC_API_URL: ${QUADRATIC_API_URL_EXTERNAL}
      VITE_QUADRATIC_MULTIPLAYER_URL: ${QUADRATIC_MULTIPLAYER_URL_EXTERNAL}
      VITE_QUADRATIC_CONNECTION_URL: ${QUADRATIC_CONNECTION_URL_EXTERNAL}
      VITE_STORAGE_TYPE: ${STORAGE_TYPE}
      VITE_AUTH_TYPE: ${AUTH_TYPE}
      VITE_AUTH0_ISSUER: ${AUTH0_ISSUER}
      VITE_AUTH0_DOMAIN: ${VITE_AUTH0_DOMAIN}
      VITE_AUTH0_CLIENT_ID: ${VITE_AUTH0_CLIENT_ID}
      VITE_AUTH0_AUDIENCE: ${AUTH0_AUDIENCE}
      VITE_ORY_HOST: ${KRATOS_URL_EXTERNAL}
      VITE_SENTRY_AUTH_TOKEN: ${SENTRY_AUTH_TOKEN}
    ports:
      - 3000:80
    entrypoint: []
    command: >
      /bin/sh -c "/client/scripts/replace_env_vars.sh && nginx -g \"daemon off;\""
    healthcheck:
      test: [ "CMD-SHELL", "curl -f http://host.docker.internal:3000/ || exit 1" ]
      start_period: 10s
      interval: 10s
      timeout: 5s
      retries: 10
    restart: "always"
    volumes:
      - ./docker/client:/client
      - ./docker/client/config/nginx.conf:/etc/nginx/nginx.conf
      - ./docker/client/config/default.conf:/etc/nginx/conf.d/default.conf
    depends_on:
      quadratic-api:
        condition: service_started
    profiles:
      - quadratic-client
      - frontend
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  quadratic-api:
    extends:
      file: docker-compose.${ECR_OR_BUILD}.yml
      service: quadratic-api
    container_name: api
    environment:
      CORS: ${QUADRATIC_API_CORS}
      DATABASE_URL: ${DATABASE_DSN}
      ENVIRONMENT: ${ENVIRONMENT}
      STRIPE_SECRET_KEY: ${STRIPE_SECRET_KEY}
      STRIPE_WEBHOOK_SECRET: ${STRIPE_WEBHOOK_SECRET}
      BILLING_AI_USAGE_LIMIT: ${BILLING_AI_USAGE_LIMIT}
      GCP_REGION: ${GCP_REGION}
      GCP_PROJECT_ID: ${GCP_PROJECT_ID}
      GCP_CLIENT_EMAIL: ${GCP_CLIENT_EMAIL}
      GCP_PRIVATE_KEY: ${GCP_PRIVATE_KEY}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
      XAI_API_KEY: ${XAI_API_KEY}
      EXA_API_KEY: ${EXA_API_KEY}
      AWS_S3_REGION: ${AWS_S3_REGION}
      AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME}
      AWS_S3_ANALYTICS_BUCKET_NAME: ${AWS_S3_ANALYTICS_BUCKET_NAME}
      AWS_S3_ACCESS_KEY_ID: ${AWS_S3_ACCESS_KEY_ID}
      AWS_S3_SECRET_ACCESS_KEY: ${AWS_S3_SECRET_ACCESS_KEY}
      M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
      AUTH_TYPE: ${AUTH_TYPE}
      AUTH0_JWKS_URI: ${JWKS_URI}
      AUTH0_ISSUER: ${AUTH0_ISSUER}
      AUTH0_DOMAIN: ${AUTH0_DOMAIN}
      AUTH0_CLIENT_ID: ${AUTH0_CLIENT_ID}
      AUTH0_CLIENT_SECRET: ${AUTH0_CLIENT_SECRET}
      AUTH0_AUDIENCE: ${AUTH0_AUDIENCE}
      ORY_JWKS_URI: ${JWKS_URI}
      ORY_ADMIN_HOST: ${ORY_ADMIN_HOST}
      STORAGE_TYPE: ${STORAGE_TYPE}
      QUADRATIC_FILE_URI: ${QUADRATIC_FILES_URL_INTERNAL}
      QUADRATIC_FILE_URI_PUBLIC: ${QUADRATIC_FILES_URL_EXTERNAL}
      LICENSE_KEY: ${LICENSE_KEY}
    restart: "always"
    ports:
      - "8000:8000"
    command: bash -c "npx prisma migrate deploy --schema quadratic-api/prisma/schema.prisma && npm run start:prod --workspace=quadratic-api"
    depends_on:
      postgres:
        condition: service_healthy
    profiles:
      - api
      - backend
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  quadratic-multiplayer:
    extends:
      file: docker-compose.${ECR_OR_BUILD}.yml
      service: quadratic-multiplayer
    container_name: multiplayer
    environment:
      RUST_LOG: ${QUADRATIC_MULTIPLAYER_RUST_LOG}
      MULTIPLAYER__HOST: ${QUADRATIC_MULTIPLAYER_HOST}
      MULTIPLAYER__PORT: ${QUADRATIC_MULTIPLAYER_PORT}
      MULTIPLAYER__HEARTBEAT_CHECK_S: ${QUADRATIC_MULTIPLAYER_HEARTBEAT_CHECK_S}
      MULTIPLAYER__HEARTBEAT_TIMEOUT_S: ${QUADRATIC_MULTIPLAYER_HEARTBEAT_TIMEOUT_S}
      MULTIPLAYER__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      MULTIPLAYER__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      MULTIPLAYER__ENVIRONMENT: ${ENVIRONMENT}
      MULTIPLAYER__PUBSUB_HOST: ${PUBSUB_HOST}
      MULTIPLAYER__PUBSUB_PORT: ${PUBSUB_PORT}
      MULTIPLAYER__PUBSUB_PASSWORD: ${PUBSUB_PASSWORD}
      MULTIPLAYER__PUBSUB_ACTIVE_CHANNELS: ${PUBSUB_ACTIVE_CHANNELS}
      MULTIPLAYER__AUTH0_JWKS_URI: ${JWKS_URI}
      MULTIPLAYER__AUTHENTICATE_JWT: true
    restart: "always"
    ports:
      - "3001:3001"
    depends_on:
      redis:
        condition: service_healthy
      quadratic-client:
        condition: service_healthy
      quadratic-api:
        condition: service_started
    profiles:
      - quadratic-multiplayer
      - backend
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  quadratic-files:
    extends:
      file: docker-compose.${ECR_OR_BUILD}.yml
      service: quadratic-files
    container_name: files
    environment:
      RUST_LOG: ${QUADRATIC_FILES_RUST_LOG}
      FILES__HOST: ${QUADRATIC_FILES_HOST}
      FILES__PORT: ${QUADRATIC_FILES_PORT}
      FILES__FILE_CHECK_S: ${QUADRATIC_FILES_FILE_CHECK_S}
      FILES__FILES_PER_CHECK: ${QUADRATIC_FILES_FILES_PER_CHECK}
      FILES__TRUNCATE_FILE_CHECK_S: ${QUADRATIC_FILES_TRUNCATE_FILE_CHECK_S}
      FILES__TRUNCATE_TRANSACTION_AGE_DAYS: ${QUADRATIC_FILES_TRUNCATE_TRANSACTION_AGE_DAYS}
      FILES__ENVIRONMENT: ${ENVIRONMENT}
      FILES__AUTH0_JWKS_URI: ${JWKS_URI}
      FILES__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      FILES__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      FILES__PUBSUB_HOST: ${PUBSUB_HOST}
      FILES__PUBSUB_PORT: ${PUBSUB_PORT}
      FILES__PUBSUB_PASSWORD: ${PUBSUB_PASSWORD}
      FILES__PUBSUB_ACTIVE_CHANNELS: ${PUBSUB_ACTIVE_CHANNELS}
      FILES__PUBSUB_PROCESSED_TRANSACTIONS_CHANNEL: ${PUBSUB_PROCESSED_TRANSACTIONS_CHANNEL}
      FILES__STORAGE_TYPE: ${STORAGE_TYPE}
      FILES__AWS_S3_REGION: ${AWS_S3_REGION}
      FILES__AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME}
      FILES__AWS_S3_ACCESS_KEY_ID: ${AWS_S3_ACCESS_KEY_ID}
      FILES__AWS_S3_SECRET_ACCESS_KEY: ${AWS_S3_SECRET_ACCESS_KEY}
      FILES__STORAGE_DIR: ${STORAGE_DIR}
      FILES__STORAGE_ENCRYPTION_KEYS: ${ENCRYPTION_KEY}
    restart: "always"
    ports:
      - "3002:3002"
    volumes:
      - ./docker/file-storage:/file-storage:rw
    depends_on:
      redis:
        condition: service_healthy
      quadratic-client:
        condition: service_healthy
      quadratic-api:
        condition: service_started
    profiles:
      - quadratic-files
      - backend
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  quadratic-connection:
    extends:
      file: docker-compose.${ECR_OR_BUILD}.yml
      service: quadratic-connection
    container_name: connection
    environment:
      RUST_LOG: ${QUADRATIC_CONNECTION_RUST_LOG}
      CONNECTION__HOST: ${QUADRATIC_CONNECTION_HOST}
      CONNECTION__PORT: ${QUADRATIC_CONNECTION_PORT}
      CONNECTION__ENVIRONMENT: ${ENVIRONMENT}
      CONNECTION__AUTH0_JWKS_URI: ${JWKS_URI}
      CONNECTION__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      CONNECTION__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      CONNECTION__MAX_RESPONSE_BYTES: ${QUADRATIC_CONNECTION_MAX_RESPONSE_BYTES}
      CONNECTION__STATIC_IPS: ${QUADRATIC_CONNECTION_STATIC_IPS}
    restart: "always"
    ports:
      - "3003:3003"
    depends_on:
      quadratic-client:
        condition: service_healthy
      quadratic-api:
        condition: service_started
    profiles:
      - quadratic-connection
      - backend
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  quadratic-dev:
    build:
      context: .
      dockerfile: Dockerfile.dev
    container_name: quadratic-dev
    environment:
      # common
      RUST_LOG: ${RUST_LOG}
      # client
      VITE_DEBUG: 1
      VITE_QUADRATIC_API_URL: ${QUADRATIC_API_URL_EXTERNAL}
      VITE_QUADRATIC_MULTIPLAYER_URL: ${QUADRATIC_MULTIPLAYER_URL_EXTERNAL}
      VITE_QUADRATIC_CONNECTION_URL: ${QUADRATIC_CONNECTION_URL_EXTERNAL}
      VITE_STORAGE_TYPE: ${STORAGE_TYPE}
      VITE_AUTH_TYPE: ${AUTH_TYPE}
      VITE_AUTH0_ISSUER: ${AUTH0_ISSUER}
      VITE_AUTH0_DOMAIN: ${VITE_AUTH0_DOMAIN}
      VITE_AUTH0_CLIENT_ID: ${VITE_AUTH0_CLIENT_ID}
      VITE_AUTH0_AUDIENCE: ${AUTH0_AUDIENCE}
      VITE_ORY_HOST: ${KRATOS_URL_EXTERNAL}
      VITE_SENTRY_AUTH_TOKEN: ${SENTRY_AUTH_TOKEN}
      # api
      CORS: "*"
      DATABASE_URL: ${DATABASE_DSN}
      STRIPE_SECRET_KEY: ${STRIPE_SECRET_KEY}
      STRIPE_WEBHOOK_SECRET: ${STRIPE_WEBHOOK_SECRET}
      BILLING_AI_USAGE_LIMIT: ${BILLING_AI_USAGE_LIMIT}
      GCP_REGION: ${GCP_REGION}
      GCP_PROJECT_ID: ${GCP_PROJECT_ID}
      GCP_CLIENT_EMAIL: ${GCP_CLIENT_EMAIL}
      GCP_PRIVATE_KEY: ${GCP_PRIVATE_KEY}
      OPENAI_API_KEY: ${OPENAI_API_KEY}
      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY}
      XAI_API_KEY: ${XAI_API_KEY}
      EXA_API_KEY: ${EXA_API_KEY}
      AWS_S3_REGION: ${AWS_S3_REGION}
      AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME}
      AWS_S3_ANALYTICS_BUCKET_NAME: ${AWS_S3_ANALYTICS_BUCKET_NAME}
      AWS_S3_ACCESS_KEY_ID: ${AWS_S3_ACCESS_KEY_ID}
      AWS_S3_SECRET_ACCESS_KEY: ${AWS_S3_SECRET_ACCESS_KEY}
      M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
      AUTH_TYPE: ${AUTH_TYPE}
      AUTH0_JWKS_URI: ${JWKS_URI}
      AUTH0_ISSUER: ${AUTH0_ISSUER}
      AUTH0_DOMAIN: ${AUTH0_DOMAIN}
      AUTH0_CLIENT_ID: ${AUTH0_CLIENT_ID}
      AUTH0_CLIENT_SECRET: ${AUTH0_CLIENT_SECRET}
      AUTH0_AUDIENCE: ${AUTH0_AUDIENCE}
      ORY_JWKS_URI: ${JWKS_URI}
      ORY_ADMIN_HOST: ${ORY_ADMIN_HOST}
      STORAGE_TYPE: ${STORAGE_TYPE}
      QUADRATIC_FILE_URI: ${QUADRATIC_FILES_URL_INTERNAL}
      QUADRATIC_FILE_URI_PUBLIC: ${QUADRATIC_FILES_URL_EXTERNAL}
      LICENSE_KEY: ${LICENSE_KEY}
      # multiplayer
      MULTIPLAYER__HOST: ${QUADRATIC_MULTIPLAYER_HOST}
      MULTIPLAYER__PORT: ${QUADRATIC_MULTIPLAYER_PORT}
      MULTIPLAYER__HEARTBEAT_CHECK_S: ${QUADRATIC_MULTIPLAYER_HEARTBEAT_CHECK_S}
      MULTIPLAYER__HEARTBEAT_TIMEOUT_S: ${QUADRATIC_MULTIPLAYER_HEARTBEAT_TIMEOUT_S}
      MULTIPLAYER__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      MULTIPLAYER__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      MULTIPLAYER__ENVIRONMENT: ${ENVIRONMENT}
      MULTIPLAYER__PUBSUB_HOST: ${PUBSUB_HOST}
      MULTIPLAYER__PUBSUB_PORT: ${PUBSUB_PORT}
      MULTIPLAYER__PUBSUB_PASSWORD: ${PUBSUB_PASSWORD}
      MULTIPLAYER__PUBSUB_ACTIVE_CHANNELS: ${PUBSUB_ACTIVE_CHANNELS}
      MULTIPLAYER__AUTH0_JWKS_URI: ${JWKS_URI}
      MULTIPLAYER__AUTHENTICATE_JWT: true
      # files
      FILES__HOST: ${QUADRATIC_FILES_HOST}
      FILES__PORT: ${QUADRATIC_FILES_PORT}
      FILES__FILE_CHECK_S: ${QUADRATIC_FILES_FILE_CHECK_S}
      FILES__FILES_PER_CHECK: ${QUADRATIC_FILES_FILES_PER_CHECK}
      FILES__TRUNCATE_FILE_CHECK_S: ${QUADRATIC_FILES_TRUNCATE_FILE_CHECK_S}
      FILES__TRUNCATE_TRANSACTION_AGE_DAYS: ${QUADRATIC_FILES_TRUNCATE_TRANSACTION_AGE_DAYS}
      FILES__ENVIRONMENT: ${ENVIRONMENT}
      FILES__AUTH0_JWKS_URI: ${JWKS_URI}
      FILES__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      FILES__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      FILES__PUBSUB_HOST: ${PUBSUB_HOST}
      FILES__PUBSUB_PORT: ${PUBSUB_PORT}
      FILES__PUBSUB_PASSWORD: ${PUBSUB_PASSWORD}
      FILES__PUBSUB_ACTIVE_CHANNELS: ${PUBSUB_ACTIVE_CHANNELS}
      FILES__PUBSUB_PROCESSED_TRANSACTIONS_CHANNEL: ${PUBSUB_PROCESSED_TRANSACTIONS_CHANNEL}
      FILES__STORAGE_TYPE: ${STORAGE_TYPE}
      FILES__AWS_S3_REGION: ${AWS_S3_REGION}
      FILES__AWS_S3_BUCKET_NAME: ${AWS_S3_BUCKET_NAME}
      FILES__AWS_S3_ACCESS_KEY_ID: ${AWS_S3_ACCESS_KEY_ID}
      FILES__AWS_S3_SECRET_ACCESS_KEY: ${AWS_S3_SECRET_ACCESS_KEY}
      FILES__STORAGE_DIR: ${STORAGE_DIR}
      FILES__STORAGE_ENCRYPTION_KEYS: ${ENCRYPTION_KEY}
      # connection
      CONNECTION__HOST: ${QUADRATIC_CONNECTION_HOST}
      CONNECTION__PORT: ${QUADRATIC_CONNECTION_PORT}
      CONNECTION__ENVIRONMENT: ${ENVIRONMENT}
      CONNECTION__AUTH0_JWKS_URI: ${JWKS_URI}
      CONNECTION__QUADRATIC_API_URI: ${QUADRATIC_API_URL_INTERNAL}
      CONNECTION__M2M_AUTH_TOKEN: ${M2M_AUTH_TOKEN}
      CONNECTION__MAX_RESPONSE_BYTES: ${QUADRATIC_CONNECTION_MAX_RESPONSE_BYTES}
      CONNECTION__STATIC_IPS: ${QUADRATIC_CONNECTION_STATIC_IPS}
    ports:
      - "3000:3000"
      - "8000:8000"
      - "3001:3001"
      - "3002:3002"
      - "3003:3003"
    volumes:
      - ./:/quadratic:rw
      - ./docker/file-storage:/file-storage:rw
    depends_on:
      redis:
        condition: service_healthy
      postgres:
        condition: service_healthy
      ory-auth:
        condition: service_started
      ory-auth-migrate:
        condition: service_started
      ory-auth-node:
        condition: service_started
      ory-auth-mail:
        condition: service_started
    profiles:
      - quadratic-dev
      - dev
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"
    tty: true
    stdin_open: true

  # auth service - ory

  ory-auth:
    image: oryd/kratos:v1.2.0
    container_name: ory-auth
    ports:
      - "4433:4433" # public
      - "4434:4434" # admin
    command: serve -c /etc/config/kratos/kratos.yml --dev --watch-courier
    volumes:
      - ./docker/ory-auth/config:/etc/config/kratos
    environment:
      DSN: ${ORY_DSN}
      LOG_LEVEL: ${ORY_LOG_LEVEL}
    restart: unless-stopped
    depends_on:
      - postgres
      - ory-auth-migrate
    profiles:
      - ory
      - dev
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  ory-auth-migrate:
    image: oryd/kratos:v1.2.0
    container_name: ory-auth-migrate
    command: migrate -c /etc/config/kratos/kratos.yml sql -e --yes
    volumes:
      - ./docker/ory-auth/config:/etc/config/kratos
    environment:
      DSN: ${ORY_DSN}
    restart: on-failure
    depends_on:
      - postgres
    profiles:
      - ory
      - dev
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  ory-auth-node:
    image: oryd/kratos-selfservice-ui-node:v1.2.0
    container_name: ory-auth-node
    ports:
      - "4455:4455"
    environment:
      PORT: ${KRATOS_NODE_PORT}
      KRATOS_PUBLIC_URL: ${KRATOS_URL_INTERNAL}
      KRATOS_BROWSER_URL: ${KRATOS_URL_EXTERNAL}
      COOKIE_SECRET: ${KRATOS_COOKIE_SECRET}
      CSRF_COOKIE_NAME: ${KRATOS_CSRF_COOKIE_NAME}
      CSRF_COOKIE_SECRET: ${KRATOS_CSRF_COOKIE_SECRET}
    restart: on-failure
    depends_on:
      - ory-auth
    profiles:
      - ory
      - dev
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  ory-auth-mail:
    image: oryd/mailslurper:latest-smtps
    container_name: ory-auth-mail
    ports:
      - "1025:1025"
      - "4436:4436"
      - "4437:4437"
      - "8080:8080"
    profiles:
      - ory
      - dev
      - all
    networks:
      - host
    extra_hosts:
      - "host.docker.internal:host-gateway"

  # databases to be used for testing by the connection service - postgres, mysql, mssql

  postgres-connection:
    image: postgres:15
    restart: always
    container_name: postgres-connection
    ports:
      - "5433:5432"
    environment:
      POSTGRES_DB: postgres-connection
      POSTGRES_USER: user
      PGUSER: user
      POSTGRES_PASSWORD: password
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U user -d postgres-connection" ]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - postgres-connection-data:/var/lib/postgresql/data
      - ./docker/postgres-connection/scripts:/docker-entrypoint-initdb.d
    profiles:
      - quadratic-connection
      - quadratic-connection-db
      - quadratic-connection-db-postgres

  mysql-connection:
    image: mysql:8
    restart: always
    container_name: mysql-connection
    ports:
      - 3306:3306
    environment:
      MYSQL_DATABASE: mysql-connection
      MYSQL_USER: user
      MYSQL_PASSWORD: password
      MYSQL_ROOT_PASSWORD: password
    healthcheck:
      test: [ "CMD", "mysqladmin", "ping", "-h", "localhost" ]
      interval: 10s
      timeout: 5s
      retries: 5
    volumes:
      - mysql-connection-data:/var/lib/mysql
      - ./docker/mysql-connection/scripts:/docker-entrypoint-initdb.d/
    profiles:
      - quadratic-connection
      - quadratic-connection-db
      - quadratic-connection-db-mysql

  mssql-connection:
    image: mcr.microsoft.com/mssql/server:2022-latest
    restart: always
    container_name: mssql-connection
    user: root
    ports:
      - 1433:1433
    environment:
      ACCEPT_EULA: Y
      MSSQL_SA_PASSWORD: yourStrong(!)Password
      MSSQL_PID: Express
    volumes:
      - mssql-connection-data:/var/opt/mssql
      - ./docker/mssql-connection/scripts:/docker-entrypoint-initdb.d/
    healthcheck:
      test: [ "CMD", "/opt/mssql-tools18/bin/sqlcmd", "-S", "localhost", "-U", "sa", "-P", "yourStrong(!)Password", "-Q", "SELECT 1", "-C", "-N", "-t", "30" ]
      interval: 10s
      timeout: 5s
      start_period: 30s
      retries: 5
    command: >
      bash -c " /opt/mssql/bin/sqlservr & sleep 10 && /opt/mssql-tools18/bin/sqlcmd -S localhost -U sa -P 'yourStrong(!)Password' -i /docker-entrypoint-initdb.d/create_db.sql -C -N -t 30 && /opt/mssql-tools18/bin/sqlcmd -S localhost -U sa -P 'yourStrong(!)Password' -i /docker-entrypoint-initdb.d/seed_db.sql -C -N -t 30 && tail -f /dev/null"
    profiles:
      - quadratic-connection
      - quadratic-connection-db
      - quadratic-connection-db-mssql

volumes:
  postgres-connection-data:
    name: postgres-connection-data
    driver: local
  mysql-connection-data:
    name: mysql-connection
    driver: local
  mssql-connection-data:
    name: mssql-connection-data
    driver: local

networks:
  host: