version: '3.4'
services:
  db:
    image: postgres:12
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure

    environment:
      - POSTGRES_USER_FILE=/run/secrets/BACKEND_DB_USER
      - POSTGRES_PASSWORD_FILE=/run/secrets/BACKEND_DB_PASSWD
    ports:
      - 5432:5432
    volumes:
      - dbdata:/var/lib/postgresql/data
    secrets:
      - BACKEND_DB_USER
      - BACKEND_DB_PASSWD

  backend:
    image: registry.gitlab.com/sahkoinsinoorikilta/vtmk/web2.0-backend:latest
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
      update_config:
        order: start-first
    depends_on:
      - db
    ports:
      - 8000:8000
    volumes:
      - type: bind
        source: /home/sik/production/files/static/.hidden/django/media
        target: /app/media
      - type: bind
        source: /home/sik/production/files/static/.hidden/django/static
        target: /app/static
      - type: bind
        source: /home/sik/production/files/static/.hidden/django/collected_static
        target: /app/collected_static

    environment:
      - SECRET_KEY_FILE=/run/secrets/BACKEND_SECRET_KEY
      - TG_BOT_TOKEN_FILE=/run/secrets/BACKEND_TG_BOT_TOKEN
      - DB_USER_FILE=/run/secrets/BACKEND_DB_USER
      - DB_PASSWD_FILE=/run/secrets/BACKEND_DB_PASSWD
      - HOST=api.sahkoinsinoorikilta.fi
      - FRONTEND_URL=prod.sahkoinsinoorikilta.fi
      - DB_HOST=db
      - DB_PORT=5432
      - EMAIL_API_KEY_FILE=/run/secrets/BACKEND_EMAIL_API_KEY
      - EMAIL_API_SECRET_FILE=/run/secrets/BACKEND_EMAIL_API_SECRET

    secrets:
      - BACKEND_SECRET_KEY
      - BACKEND_TG_BOT_TOKEN
      - BACKEND_DB_USER
      - BACKEND_DB_PASSWD
      - BACKEND_EMAIL_API_KEY
      - BACKEND_EMAIL_API_SECRET
secrets:
  BACKEND_SECRET_KEY:
    external: true
  BACKEND_TG_BOT_TOKEN:
    external: true
  BACKEND_DB_NAME:
    external: true
  BACKEND_DB_USER:
    external: true
  BACKEND_DB_PASSWD:
    external: true
  BACKEND_EMAIL_API_KEY:
    external: true
  BACKEND_EMAIL_API_SECRET:
    external: true

volumes:
  dbdata: