services:
  postgres:
    image: postgres:17
    environment:
      POSTGRES_USER: decompme
      POSTGRES_PASSWORD: decompme
    ports:
      - "5432:5432"
    volumes:
      - ./postgres:/var/lib/postgresql/data
  backend:
    build:
      context: backend
      target: dev
    cap_drop:
      - all
    cap_add:
      - setuid
      - setgid
      - setfcap
    environment:
      - ENABLE_SWITCH_SUPPORT=NO
    env_file:
      - backend/docker.dev.env
    ports:
      - "8000:8000"
      - "5678:5678"  # vscode debugger
    security_opt:
      - apparmor=unconfined
      - seccomp=unconfined
    volumes:
      - ./backend:/backend
    tmpfs:
      # Use a separate tmpfs to prevent a rogue jailed process
      # from filling /tmp on the parent container
      - /sandbox/tmp:exec,uid=1000,gid=1000,size=64M,mode=0700
  frontend:
    build:
      context: frontend
      target: dev
    environment:
      API_BASE: /api
      INTERNAL_API_BASE: http://backend:8000/api
    ports:
      - "8080:8080"
    volumes:
      - ./frontend:/frontend
      - .env:/.env
  nginx:
    image: nginx:1.28-alpine
    ports:
      - "80:80"
    volumes:
      - ./nginx/development.conf:/etc/nginx/conf.d/default.conf:ro
      - ./frontend/down.html:/var/www/down.html:ro
      - ./backend/media:/media