x-log-limits: &log-limits
  driver: json-file
  options:
    max-size: ${DOCKER_LOG_MAX_SIZE:-100m}
    max-file: "${DOCKER_LOG_MAX_FILES:-5}"

services:
  timescaledb:
    image: timescale/timescaledb:latest-pg17
    container_name: public-pool-timescaledb
    restart: unless-stopped
    logging: *log-limits
    environment:
      POSTGRES_DB: ${DB_DATABASE:-public_pool}
      POSTGRES_USER: ${DB_USERNAME:-public_pool}
      POSTGRES_PASSWORD: ${DB_PASSWORD:-public_pool}
    command:
      - postgres
      - -c
      - max_wal_size=16GB
      - -c
      - min_wal_size=2GB
      - -c
      - checkpoint_timeout=15min
      - -c
      - checkpoint_completion_target=0.9
      - -c
      - wal_compression=on
    ports:
      - "127.0.0.1:${DB_PORT:-5432}:5432/tcp"
    volumes:
      - timescaledb-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${DB_USERNAME:-public_pool} -d ${DB_DATABASE:-public_pool}"]
      interval: 10s
      timeout: 5s
      retries: 10

  redis:
    image: redis:8-alpine
    container_name: public-pool-redis
    restart: unless-stopped
    logging: *log-limits
    ports:
      - "127.0.0.1:${REDIS_PORT:-6379}:6379/tcp"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10

  public-pool:
    container_name: public-pool
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    logging: *log-limits
    depends_on:
      timescaledb:
        condition: service_healthy
      redis:
        condition: service_healthy
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - "0.0.0.0:3333:3333/tcp"
      - "0.0.0.0:3332:3332/tcp"
      - "0.0.0.0:3331:3331/tcp"
      - "0.0.0.0:3330:3330/tcp"
      - "0.0.0.0:4333:4333/tcp"
      - "0.0.0.0:4332:4332/tcp"
      - "0.0.0.0:4331:4331/tcp"
      - "0.0.0.0:4330:4330/tcp"
      - "${API_BIND_HOST:-127.0.0.1}:${API_PUBLIC_PORT:-3334}:3334/tcp"
    volumes:
      - "./.env:/public-pool/.env:ro"
      - "./secrets:/public-pool/secrets:ro"
    environment:
      NODE_ENV: production
      DB_HOST: timescaledb
      DB_PORT: 5432
      DB_USERNAME: ${DB_USERNAME:-public_pool}
      DB_PASSWORD: ${DB_PASSWORD:-public_pool}
      DB_DATABASE: ${DB_DATABASE:-public_pool}
      REDIS_URL: redis://redis:6379
      API_PORT: ${API_PORT:-3334}
      API_SECURE: ${API_SECURE:-false}
      API_WORKERS: ${API_WORKERS:-4}
      PM2_ENABLED: ${PM2_ENABLED:-true}
      STRATUM_WORKERS: ${STRATUM_WORKERS:-2}
      STRATUM_PORTS: ${STRATUM_PORTS:-3333,3332,3331,3330}
      STRATUM_MIN_DIFFICULTY: ${STRATUM_MIN_DIFFICULTY:-1}
      STRATUM_SOCKET_TIMEOUT_MS: ${STRATUM_SOCKET_TIMEOUT_MS:-3600000}
      STRATUM_TCP_KEEPALIVE_INITIAL_DELAY_MS: ${STRATUM_TCP_KEEPALIVE_INITIAL_DELAY_MS:-60000}
      STRATUM_SECURE: ${STRATUM_SECURE:-true}
      SECURE_STRATUM_PORTS: ${SECURE_STRATUM_PORTS:-4333,4332,4331,4330}
      STRATUM_MAX_CONNECTIONS_PER_LISTENER: ${STRATUM_MAX_CONNECTIONS_PER_LISTENER:-10000}
      STRATUM_TLS_HANDSHAKE_TIMEOUT_MS: ${STRATUM_TLS_HANDSHAKE_TIMEOUT_MS:-10000}
      STRATUM_V2_PORTS: ${STRATUM_V2_PORTS:-}
    healthcheck:
      test: ["CMD-SHELL", "node -e \"const http=require('http'); const https=require('https'); const secure=process.env.API_SECURE==='true'; const client=secure?https:http; const req=client.get({hostname:'127.0.0.1',port:process.env.API_PORT||3334,path:'/api/network',rejectUnauthorized:false},res=>process.exit(res.statusCode<500?0:1)); req.on('error',()=>process.exit(1)); req.setTimeout(5000,()=>{req.destroy(); process.exit(1);});\""]
      interval: 30s
      timeout: 5s
      retries: 10

volumes:
  timescaledb-data:
  redis-data: