services:
  app:
    build: .
    environment:
      NODE_ENV: production
      DATABASE_URL: postgresql://roast:${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}@db:5432/roast
      APP_ORIGIN: https://roast.srmr.xyz
      COOKIE_SECURE: "true"
      BOOTSTRAP_SETUP_TOKEN: ${BOOTSTRAP_SETUP_TOKEN:?set a one-time random token}
    depends_on: [db]
    expose: ["8090"]
    restart: unless-stopped
  db:
    image: postgres:16-alpine
    environment:
      POSTGRES_DB: roast
      POSTGRES_USER: roast
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD}
    volumes: [postgres-data:/var/lib/postgresql/data]
    restart: unless-stopped
volumes:
  postgres-data: