services:
  app:
    image: sahabat-ibu-hamil-backend:latest
    container_name: his-server
    volumes:
      - wa_sessions:/app/sessions
    networks:
      - database_database-network
      - his-server-network
      - npm-network
    env_file:
      - .env.docker
    healthcheck:
      test: [ "CMD-SHELL", "curl -fsS http://localhost:3000/health || exit 1" ]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp/app:exec,nosuid,size=100m,uid=1001,gid=1001
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - SETGID
      - SETUID

  bullmq-ui:
    image: deadly0/bull-board:latest
    container_name: his-bullmq
    environment:
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - REDIS_USERNAME=mtkun
      - REDIS_PASSWORD=7Ms<_])17wUa
      - REDIS_DB=0
    restart: unless-stopped
    networks:
      - database_database-network
      - his-server-network
      - npm-network
    security_opt:
      - no-new-privileges:true

networks:
  his-server-network:
    driver: bridge
  database_database-network:
    external: true
  npm-network:
    external: true

volumes:
  wa_sessions:
    driver: local