x-log-limits: &log-limits
  driver: json-file
  options:
    max-size: ${DOCKER_LOG_MAX_SIZE:-100m}
    max-file: "${DOCKER_LOG_MAX_FILES:-5}"

services:
  redis:
    image: redis:8-alpine
    container_name: public-pool-redis
    restart: unless-stopped
    logging: *log-limits
    ports:
      - "127.0.0.1:${REDIS_PORT:-6379}:6379/tcp"
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 10

  public-pool:
    container_name: public-pool
    build:
      context: .
      dockerfile: Dockerfile
    restart: unless-stopped
    logging: *log-limits
    depends_on:
      redis:
        condition: service_healthy
    extra_hosts:
      - "host.docker.internal:host-gateway"
    ports:
      - "0.0.0.0:3333:3333/tcp"
      - "0.0.0.0:3332:3332/tcp"
      - "0.0.0.0:3331:3331/tcp"
      - "0.0.0.0:3330:3330/tcp"
      - "0.0.0.0:4333:4333/tcp"
      - "0.0.0.0:4332:4332/tcp"
      - "0.0.0.0:4331:4331/tcp"
      - "0.0.0.0:4330:4330/tcp"
      - "0.0.0.0:13333:13333/tcp"
      - "0.0.0.0:13332:13332/tcp"
      - "0.0.0.0:13331:13331/tcp"
      - "0.0.0.0:13330:13330/tcp"
      - "0.0.0.0:14333:14333/tcp"
      - "0.0.0.0:14332:14332/tcp"
      - "0.0.0.0:14331:14331/tcp"
      - "0.0.0.0:14330:14330/tcp"
      - "0.0.0.0:23330:23330/tcp"
      - "0.0.0.0:23331:23331/tcp"
      - "0.0.0.0:23332:23332/tcp"
      - "0.0.0.0:23333:23333/tcp"
      - "0.0.0.0:23334:23334/tcp"
      - "0.0.0.0:23335:23335/tcp"
      - "0.0.0.0:23336:23336/tcp"
      - "${API_BIND_HOST:-127.0.0.1}:${API_PUBLIC_PORT:-3334}:3334/tcp"
    volumes:
      - "./.env:/public-pool/.env:ro"
      - "./secrets:/public-pool/secrets:ro"
    environment:
      NODE_ENV: production
      DB_HOST: ${DB_HOST:?set DB_HOST to your external TimescaleDB/Postgres host}
      DB_PORT: ${DB_PORT:-5432}
      DB_USERNAME: ${DB_USERNAME:-public_pool}
      DB_PASSWORD: ${DB_PASSWORD:?set DB_PASSWORD for your external database}
      DB_DATABASE: ${DB_DATABASE:-public_pool}
      DB_POOL_SIZE: ${DB_POOL_SIZE:-10}
      DB_SSL: ${DB_SSL:-false}
      DB_SSL_REJECT_UNAUTHORIZED: ${DB_SSL_REJECT_UNAUTHORIZED:-true}
      REDIS_URL: ${REDIS_URL:-redis://redis:6379}
      API_PORT: ${API_PORT:-3334}
      API_SECURE: ${API_SECURE:-false}
      API_WORKERS: ${API_WORKERS:-4}
      PM2_ENABLED: ${PM2_ENABLED:-true}
      STRATUM_WORKERS: ${STRATUM_WORKERS:-auto}
      STRATUM_PORTS: ${STRATUM_PORTS:-3333,3332,3331,3330}
      PPLNS_STRATUM_PORTS: ${PPLNS_STRATUM_PORTS:-}
      STRATUM_MIN_DIFFICULTY: ${STRATUM_MIN_DIFFICULTY:-1}
      STRATUM_SOCKET_TIMEOUT_MS: ${STRATUM_SOCKET_TIMEOUT_MS:-3600000}
      STRATUM_TCP_KEEPALIVE_INITIAL_DELAY_MS: ${STRATUM_TCP_KEEPALIVE_INITIAL_DELAY_MS:-60000}
      STRATUM_SECURE: ${STRATUM_SECURE:-true}
      SECURE_STRATUM_PORTS: ${SECURE_STRATUM_PORTS:-4333,4332,4331,4330}
      PPLNS_SECURE_STRATUM_PORTS: ${PPLNS_SECURE_STRATUM_PORTS:-}
      STRATUM_MAX_CONNECTIONS_PER_LISTENER: ${STRATUM_MAX_CONNECTIONS_PER_LISTENER:-10000}
      STRATUM_TLS_HANDSHAKE_TIMEOUT_MS: ${STRATUM_TLS_HANDSHAKE_TIMEOUT_MS:-10000}
      STRATUM_BACKPRESSURE_ENABLED: "${STRATUM_BACKPRESSURE_ENABLED:-false}"
      STRATUM_V2_PORTS: ${STRATUM_V2_PORTS:-}
      PPLNS_STRATUM_V2_PORTS: ${PPLNS_STRATUM_V2_PORTS:-}
      SV2_JDP_PORTS: ${SV2_JDP_PORTS:-}
      PPLNS_SV2_JDP_PORTS: ${PPLNS_SV2_JDP_PORTS:-}
      SV2_TDP_PORTS: ${SV2_TDP_PORTS:-}
      PPLNS_SV2_TDP_PORTS: ${PPLNS_SV2_TDP_PORTS:-}
      DATUM_PORTS: ${DATUM_PORTS:-}
      PPLNS_DATUM_PORTS: ${PPLNS_DATUM_PORTS:-}
      SHARE_ACCOUNTING_BATCH_SIZE: ${SHARE_ACCOUNTING_BATCH_SIZE:-500}
      SHARE_ACCOUNTING_FLUSH_INTERVAL_MS: ${SHARE_ACCOUNTING_FLUSH_INTERVAL_MS:-25}
      SHARE_ACCOUNTING_MAX_QUEUE_SIZE: ${SHARE_ACCOUNTING_MAX_QUEUE_SIZE:-50000}
      SHARE_ACCOUNTING_SUMMARY_CACHE_MS: ${SHARE_ACCOUNTING_SUMMARY_CACHE_MS:-2500}
      SHARE_ACCOUNTING_SUMMARY_CACHE_MAX: ${SHARE_ACCOUNTING_SUMMARY_CACHE_MAX:-10000}
      SHARE_ROLLUP_ENABLED: ${SHARE_ROLLUP_ENABLED:-true}
      SHARE_ROLLUP_INTERVAL_MS: ${SHARE_ROLLUP_INTERVAL_MS:-60000}
      SHARE_ROLLUP_SAFETY_LAG_SECONDS: ${SHARE_ROLLUP_SAFETY_LAG_SECONDS:-30}
      SHARE_ROLLUP_MAX_SHARES_PER_BATCH: ${SHARE_ROLLUP_MAX_SHARES_PER_BATCH:-5000000}
      PAYOUT_SNAPSHOT_ENABLED: ${PAYOUT_SNAPSHOT_ENABLED:-true}
      PAYOUT_METHOD: ${PAYOUT_METHOD:-pplns}
      PAYOUT_WINDOW_FACTOR: ${PAYOUT_WINDOW_FACTOR:-4}
      PAYOUT_BOOTSTRAP_WINDOW: ${PAYOUT_BOOTSTRAP_WINDOW:-true}
      PAYOUT_MAX_COINBASE_OUTPUTS: ${PAYOUT_MAX_COINBASE_OUTPUTS:-200}
      PAYOUT_MIN_OUTPUT_SATS: ${PAYOUT_MIN_OUTPUT_SATS:-546}
      PAYOUT_FEE_ADDRESS: ${PAYOUT_FEE_ADDRESS:-}
      PAYOUT_FEE_PERCENT: ${PAYOUT_FEE_PERCENT:-0}
      PAYOUT_COINBASE_WEIGHT_BUDGET: ${PAYOUT_COINBASE_WEIGHT_BUDGET:-26000}
    healthcheck:
      test: ["CMD-SHELL", "node -e \"const http=require('http'); const https=require('https'); const secure=process.env.API_SECURE==='true'; const client=secure?https:http; const req=client.get({hostname:'127.0.0.1',port:process.env.API_PORT||3334,path:'/api/network',rejectUnauthorized:false},res=>process.exit(res.statusCode<500?0:1)); req.on('error',()=>process.exit(1)); req.setTimeout(5000,()=>{req.destroy(); process.exit(1);});\""]
      interval: 30s
      timeout: 5s
      retries: 10

volumes:
  redis-data: