# Kombi-Server: TMDB-Proxy + verschlüsselter Bibliotheks-Sync.
# Auf Unraid: dieses Compose-File über "Compose Manager" einbinden oder die
# beiden Container (db + app) einzeln anlegen. Werte aus .env beziehen.
services:
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: umt
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-change-me}
      POSTGRES_DB: umt
    volumes:
      - umt_pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U umt -d umt"]
      interval: 10s
      timeout: 5s
      retries: 5

  app:
    build: .
    image: umt-combo-server:latest
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    ports:
      - "8080:8080"
    environment:
      LISTEN_ADDR: ":8080"
      PUBLIC_URL: ${PUBLIC_URL}
      TMDB_API_KEY: ${TMDB_API_KEY}
      OIDC_ISSUER: ${OIDC_ISSUER}
      OIDC_CLIENT_ID: ${OIDC_CLIENT_ID}
      OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET}
      OIDC_REDIRECT_URL: ${OIDC_REDIRECT_URL}
      SESSION_SECRET: ${SESSION_SECRET}
      ALLOWED_GROUPS: ${ALLOWED_GROUPS:-}
      TOKEN_TTL_DAYS: ${TOKEN_TTL_DAYS:-90}
      # Library-Sync: leer lassen, um den Sync zu deaktivieren.
      DATABASE_URL: postgres://umt:${POSTGRES_PASSWORD:-change-me}@db:5432/umt?sslmode=disable

volumes:
  umt_pgdata: