services:
  remote-db:
    image: postgres:16-alpine
    command: [ "postgres", "-c", "wal_level=logical" ]
    environment:
      POSTGRES_DB: remote
      POSTGRES_USER: remote
      POSTGRES_PASSWORD: remote
    volumes:
      - remote-db-data:/var/lib/postgresql/data
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -U remote -d remote" ]
      interval: 5s
      timeout: 5s
      retries: 5
      start_period: 5s
    ports:
      - "5432:5432"

  electric:
    image: electricsql/electric:latest
    working_dir: /app
    environment:
      DATABASE_URL: postgresql://electric_sync:${ELECTRIC_ROLE_PASSWORD:?set in .env.remote}@remote-db:5432/remote?sslmode=disable
      PG_PROXY_PORT: 65432
      LOGICAL_PUBLISHER_HOST: electric
      AUTH_MODE: insecure
      ELECTRIC_INSECURE: true
      ELECTRIC_MANUAL_TABLE_PUBLISHING: true
      ELECTRIC_USAGE_REPORTING: false
    volumes:
      - electric-data:/app/persistent
    depends_on:
      remote-db:
        condition: service_healthy

  remote-server:
    build:
      context: ../..
      dockerfile: crates/remote/Dockerfile
    depends_on:
      remote-db:
        condition: service_healthy
      electric:
        condition: service_started
    environment:
      SERVER_DATABASE_URL: postgres://remote:remote@remote-db:5432/remote
      SERVER_LISTEN_ADDR: 0.0.0.0:8081
      ELECTRIC_URL: http://electric:3000
      GITHUB_OAUTH_CLIENT_ID: ${GITHUB_OAUTH_CLIENT_ID:?set in .env.remote}
      GITHUB_OAUTH_CLIENT_SECRET: ${GITHUB_OAUTH_CLIENT_SECRET:?set in .env.remote}
      GOOGLE_OAUTH_CLIENT_ID: ${GOOGLE_OAUTH_CLIENT_ID:?set in .env.remote}
      GOOGLE_OAUTH_CLIENT_SECRET: ${GOOGLE_OAUTH_CLIENT_SECRET:?set in .env.remote}
      VIBEKANBAN_REMOTE_JWT_SECRET: ${VIBEKANBAN_REMOTE_JWT_SECRET:?set in .env.remote}
      LOOPS_EMAIL_API_KEY: ${LOOPS_EMAIL_API_KEY:?set in .env.remote}
      SERVER_PUBLIC_BASE_URL: http://localhost:3000
      VITE_APP_BASE_URL: http://localhost:3000
      VITE_API_BASE_URL: http://localhost:3000
      ELECTRIC_ROLE_PASSWORD: ${ELECTRIC_ROLE_PASSWORD:?set in .env.remote}
      R2_ACCESS_KEY_ID: ${R2_ACCESS_KEY_ID:-}
      R2_SECRET_ACCESS_KEY: ${R2_SECRET_ACCESS_KEY:-}
      R2_REVIEW_ENDPOINT: ${R2_REVIEW_ENDPOINT:-}
      R2_REVIEW_BUCKET: ${R2_REVIEW_BUCKET:-}
      REVIEW_WORKER_BASE_URL: ${REVIEW_WORKER_BASE_URL:-}
      GITHUB_APP_ID: ${GITHUB_APP_ID:-}
      GITHUB_APP_PRIVATE_KEY: ${GITHUB_APP_PRIVATE_KEY:-}
      GITHUB_APP_WEBHOOK_SECRET: ${GITHUB_APP_WEBHOOK_SECRET:-}
      GITHUB_APP_SLUG: ${GITHUB_APP_SLUG:-}
    ports:
      - "127.0.0.1:3000:8081"
    restart: unless-stopped

volumes:
  remote-db-data:
  electric-data: