# docker-compose.yml
version: "3.9"

networks:
  traefik-network:
    name: traefik-network
    external: true
  util-bills-mongo-network:
    name: "util-bills-mongo-network"
    attachable: false
    external: false
    internal: true # bridge network, isolated from host and other networks

services:
  web-app:
    image: utility-bills-tracker:${IMAGE_VERSION}
    networks:
      - traefik-network
      - util-bills-mongo-network
    volumes:
      - ./web-app/etc/hosts/:/etc/hosts
    environment:
      MONGODB_URI: mongodb://rezije.app:w4z4piJBgCdAm4tpawqB@mongo:27017/utility-bills
      GOOGLE_ID: 355397364527-adjrokm6hromcaaar0qfhk050mfr35ou.apps.googleusercontent.com
      GOOGLE_SECRET: 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
      AUTH_SECRET: Gh0jQ35oq6DR8HkLR3heA8EaEDtxYN/xkP6blvukZ0w=
      LINKEDIN_ID: 776qlcsykl1rag
      LINKEDIN_SECRET: ugf61aJ2iyErLK40
      HOSTNAME: rezije.app # IP address at which the server will be listening (0.0.0.0 = listen on all addresses)
      NEXTAUTH_URL: https://rezije.app # URL next-auth will use while redirecting user during authentication (if not set - will use HOSTNAME)
      PORT: ${PORT:-80}
      # Share link security
      SHARE_LINK_SECRET: ef68362357315d5decb27d24ff9abdb4a02a3351cd2899f79bf238dce0fe08c5
      SHARE_TTL_INITIAL_DAYS: 10
      SHARE_TTL_AFTER_VISIT_HOURS: 1
      # Upload rate limiting
      UPLOAD_RATE_LIMIT_PER_IP: 5
      UPLOAD_RATE_LIMIT_WINDOW_MS: 3600000
    container_name: evidencija-rezija__web-app
    restart: unless-stopped  # u slučaju rušenja containera pokušavaj ga pokrenuti dok ne uspije = BESKONAČNO
    depends_on:
      - mongo
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-network # mreže preko koje ide komunikacija sa Traefikom
      - traefik.http.services.web-app.loadbalancer.server.port=80
      - traefik.http.routers.web-app.entrypoints=http
      - traefik.http.routers.web-app.rule=Host(`${FQDN:-rezije.app}`)

  mongo:
    image: mongo:4.4.27
    container_name: evidencija-rezija__mongo
    restart: unless-stopped  # u slučaju rušenja containera pokušavaj ga pokrenuti dok ne uspije = BESKONAČNO
    environment:
      MONGO_INITDB_ROOT_USERNAME: root
      MONGO_INITDB_ROOT_PASSWORD: example
    volumes:
      - ./mongo-volume:/data/db
      - ./mongo-backup:/backup
    networks:
      - util-bills-mongo-network
  mongo-express:
    image: mongo-express
    environment:
      ME_CONFIG_MONGODB_ADMINUSERNAME: root
      ME_CONFIG_MONGODB_ADMINPASSWORD: HjktJCPWMBtM1ACrDaw7
      ME_CONFIG_MONGODB_URL: mongodb://root:HjktJCPWMBtM1ACrDaw7@mongo:27017/
    networks:
      - traefik-network
      - util-bills-mongo-network
    container_name: evidencija-rezija__mongo-express
    restart: unless-stopped
    depends_on:
      - mongo
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-network # mreže preko koje ide komunikacija sa Traefikom
      - traefik.http.services.mongo-express.loadbalancer.server.port=8081
      - traefik.http.routers.mongo-express.entrypoints=http
      - traefik.http.routers.mongo-express.rule=Host(`mongo.rezije.app`)