services:
  eifeldc:
    build:
      context: ..
      dockerfile: Dockerfile
    container_name: eifeldc-server
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - EIFELDC_STATIC_DIR=/usr/share/eifeldc/client
      - RUST_LOG=eifeldc_server=info,tower_http=info
      - LIVEKIT_API_KEY=${LIVEKIT_API_KEY:-devkey}
      - LIVEKIT_API_SECRET=${LIVEKIT_API_SECRET:-devsecret}
      - LIVEKIT_URL=ws://livekit:7880
      - SYNAPSE_URL=http://synapse:8008
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/api/current-user"]
      interval: 15s
      timeout: 5s
      retries: 3
      start_period: 10s
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: "1.0"
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    networks:
      - eifeldc

  synapse:
    image: matrixdotorg/synapse:latest
    container_name: eifeldc-synapse
    restart: unless-stopped
    volumes:
      - synapse-data:/data
      - ./synapse/log.config:/data/log.config:ro
    environment:
      - SYNAPSE_SERVER_NAME=${DOMAIN:-eifeldc.local}
      - SYNAPSE_REPORT_STATS=no
    ports:
      - "8008:8008"
      - "8448:8448"
    depends_on:
      postgres:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8008/_matrix/client/versions"]
      interval: 15s
      timeout: 5s
      retries: 5
      start_period: 30s
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: "2.0"
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    networks:
      - eifeldc

  postgres:
    image: postgres:16-alpine
    container_name: eifeldc-postgres
    restart: unless-stopped
    volumes:
      - postgres-data:/var/lib/postgresql/data
    environment:
      POSTGRES_USER: synapse
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme_postgres_password}
      POSTGRES_DB: synapse
      POSTGRES_INITDB_ARGS: "--encoding=UTF8 --lc-collate=C --lc-ctype=C"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U synapse"]
      interval: 5s
      timeout: 5s
      retries: 5
    deploy:
      resources:
        limits:
          memory: 512M
          cpus: "1.0"
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    networks:
      - eifeldc

  coturn:
    image: coturn/coturn:latest
    container_name: eifeldc-coturn
    restart: unless-stopped
    network_mode: host
    volumes:
      - ./coturn/turnserver.conf:/etc/turnserver.conf:ro
      - turn-certs:/etc/letsencrypt
    command: ["-c", "/etc/turnserver.conf"]
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"

  livekit:
    image: livekit/livekit-server:latest
    container_name: eifeldc-livekit
    restart: unless-stopped
    ports:
      - "7880:7880"
      - "7881:7881"
      - "7882:7882/udp"
      - "50000-50200:50000-50200/udp"
    environment:
      - LIVEKIT_KEYS=${LIVEKIT_API_KEY:-devkey}: ${LIVEKIT_API_SECRET:-devsecret}
    command: --dev --node-ip ${LIVEKIT_NODE_IP:-127.0.0.1}
    healthcheck:
      test: ["CMD", "wget", "--spider", "-q", "http://localhost:7880"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 5s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    networks:
      - eifeldc

  nginx:
    image: nginx:alpine
    container_name: eifeldc-nginx
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/eifeldc.conf:/etc/nginx/conf.d/eifeldc.conf:ro
      - nginx-certs:/etc/letsencrypt:ro
    depends_on:
      eifeldc:
        condition: service_healthy
      synapse:
        condition: service_healthy
      livekit:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/"]
      interval: 15s
      timeout: 5s
      retries: 3
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    networks:
      - eifeldc

volumes:
  postgres-data:
  turn-certs:
  nginx-certs:
  synapse-data:

networks:
  eifeldc:
    driver: bridge