version: '3.8'

services:
  certificator:
    build:
      context: ../4NK_certificator
      dockerfile: Dockerfile
    container_name: 4nk_certificator
    environment:
      - RUST_LOG=info
    ports:
      - "0.0.0.0:8082:8082"
    volumes:
      - /home/debian/4NK_env/confs/4nk_certificator/certificator.toml:/app/config.toml:ro
      - certificator_data:/app/data
      - /home/debian/4NK_env/logs/4nk_certificator:/var/log/4nk_certificator
    networks:
      - btcnet
    depends_on:
      - certificator_db
      - certificator_redis
      - sdk_relay
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8082/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    restart: unless-stopped
    labels:
      - "com.centurylinklabs.watchtower.enable=true"

  certificator_db:
    image: postgres:15-alpine
    container_name: 4nk_certificator_db
    environment:
      POSTGRES_DB: certificator_db
      POSTGRES_USER: certificator
      POSTGRES_PASSWORD: ${CERTIFICATOR_DB_PASSWORD:-secure_password_change_me}
    volumes:
      - certificator_pgdata:/var/lib/postgresql/data
    networks:
      - btcnet
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U certificator"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  certificator_redis:
    image: redis:7-alpine
    container_name: 4nk_certificator_redis
    command: redis-server --appendonly yes
    volumes:
      - certificator_redis:/data
    networks:
      - btcnet
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

volumes:
  certificator_data:
    name: certificator_data
  certificator_pgdata:
    name: certificator_pgdata
  certificator_redis:
    name: certificator_redis

networks:
  btcnet:
    external: true
    name: 4nk_node_btcnet