services:
  redis:
    image: redis:8-alpine
    container_name: public-pool-redis
    restart: unless-stopped
    ports:
      - "127.0.0.1:${REDIS_PORT:-6379}:6379/tcp"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10

  public-pool:
    container_name: public-pool
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    depends_on:
      redis:
        condition: service_healthy
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - "0.0.0.0:3333:3333/tcp"
      - "0.0.0.0:3332:3332/tcp"
      - "0.0.0.0:3331:3331/tcp"
      - "0.0.0.0:3330:3330/tcp"
      - "0.0.0.0:4333:4333/tcp"
      - "0.0.0.0:4332:4332/tcp"
      - "0.0.0.0:4331:4331/tcp"
      - "0.0.0.0:4330:4330/tcp"
      - "${API_BIND_HOST:-127.0.0.1}:${API_PUBLIC_PORT:-3334}:3334/tcp"
    volumes:
      - "./.env:/public-pool/.env:ro"
      - "./secrets:/public-pool/secrets:ro"
    environment:
      NODE_ENV: production
      DB_HOST: ${DB_HOST:?set DB_HOST to your external TimescaleDB/Postgres host}
      DB_PORT: ${DB_PORT:-5432}
      DB_USERNAME: ${DB_USERNAME:-public_pool}
      DB_PASSWORD: ${DB_PASSWORD:?set DB_PASSWORD for your external database}
      DB_DATABASE: ${DB_DATABASE:-public_pool}
      DB_POOL_SIZE: ${DB_POOL_SIZE:-10}
      DB_SSL: ${DB_SSL:-false}
      DB_SSL_REJECT_UNAUTHORIZED: ${DB_SSL_REJECT_UNAUTHORIZED:-true}
      REDIS_URL: ${REDIS_URL:-redis://redis:6379}
      API_PORT: ${API_PORT:-3334}
      API_SECURE: ${API_SECURE:-false}
      API_WORKERS: ${API_WORKERS:-4}
      PM2_ENABLED: ${PM2_ENABLED:-true}
      STRATUM_WORKERS: ${STRATUM_WORKERS:-2}
      STRATUM_PORTS: ${STRATUM_PORTS:-3333,3332,3331,3330}
      STRATUM_SECURE: ${STRATUM_SECURE:-true}
      SECURE_STRATUM_PORTS: ${SECURE_STRATUM_PORTS:-4333,4332,4331,4330}
      STRATUM_MAX_CONNECTIONS_PER_LISTENER: ${STRATUM_MAX_CONNECTIONS_PER_LISTENER:-10000}
      STRATUM_TLS_HANDSHAKE_TIMEOUT_MS: ${STRATUM_TLS_HANDSHAKE_TIMEOUT_MS:-10000}
      STRATUM_V2_PORTS: ${STRATUM_V2_PORTS:-}
      SHARE_ACCOUNTING_BATCH_SIZE: ${SHARE_ACCOUNTING_BATCH_SIZE:-500}
      SHARE_ACCOUNTING_FLUSH_INTERVAL_MS: ${SHARE_ACCOUNTING_FLUSH_INTERVAL_MS:-25}
      SHARE_ACCOUNTING_MAX_QUEUE_SIZE: ${SHARE_ACCOUNTING_MAX_QUEUE_SIZE:-50000}
      SHARE_ACCOUNTING_SUMMARY_CACHE_MS: ${SHARE_ACCOUNTING_SUMMARY_CACHE_MS:-2500}
      SHARE_ACCOUNTING_SUMMARY_CACHE_MAX: ${SHARE_ACCOUNTING_SUMMARY_CACHE_MAX:-10000}
    healthcheck:
      test: ["CMD-SHELL", "node -e \"const http=require('http'); const https=require('https'); const secure=process.env.API_SECURE==='true'; const client=secure?https:http; const req=client.get({hostname:'127.0.0.1',port:process.env.API_PORT||3334,path:'/api/network',rejectUnauthorized:false},res=>process.exit(res.statusCode<500?0:1)); req.on('error',()=>process.exit(1)); req.setTimeout(5000,()=>{req.destroy(); process.exit(1);});\""]
      interval: 30s
      timeout: 5s
      retries: 10

volumes:
  redis-data: