services:
  app:
    image: git.fabledsword.com/bvandeusen/fabledassistant:latest
    environment:
      DATABASE_URL: "postgresql+asyncpg://fabled:${DB_PASSWORD}@db:5432/fabledassistant"
      SECRET_KEY: "${SECRET_KEY}"
      LOG_LEVEL: "${LOG_LEVEL:-INFO}"
      TRUST_PROXY_HEADERS: "true"
      SECURE_COOKIES: "true"
    networks:
      - fabledassistant_backend
    healthcheck:
      test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:5000/api/health')"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    deploy:
      restart_policy:
        condition: on-failure
        max_attempts: 5

  db:
    image: postgres:16-alpine
    stop_grace_period: 120s
    volumes:
      - pgdata:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: fabled
      POSTGRES_PASSWORD: "${DB_PASSWORD}"
      POSTGRES_DB: fabledassistant
    networks:
      - fabledassistant_backend
    # Lenient by design: a transient host exec/healthcheck stall (incident:
    # runc setns failures -> "unhealthy" -> SIGKILL -> crash loop) must never
    # escalate to killing the DB. Health here only gates app startup order.
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U fabled"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 180s
    deploy:
      restart_policy:
        condition: on-failure
        delay: 10s
        max_attempts: 0
        window: 120s

volumes:
  pgdata:

networks:
  fabledassistant_backend:
    driver: overlay