temetro/backend/docker-compose.yml

# Full-stack dev/run orchestration for temetro.
#
#   docker compose up      # db + backend + frontend — that's it.
#
# No .env or secret setup is required: the backend generates any missing
# secrets on first start and persists them (see docker-entrypoint.sh). Create a
# .env only if you want to override something (SMTP, a real auth secret, etc.).
#
# Frontend  -> http://localhost:3000
# Backend   -> http://localhost:4000
# Postgres  -> localhost:5432
#
# The frontend service builds the sibling ../frontend app. Run just the API
# with:  docker compose up db backend
#
# Optional DB browser (Adminer) lives behind a profile:
#   docker compose --profile tools up adminer   # http://localhost:8080

services:
  db:
    image: postgres:17-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: temetro
      POSTGRES_PASSWORD: temetro
      POSTGRES_DB: temetro
    ports:
      # Host port is configurable to avoid clashing with an existing Postgres.
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - temetro_pgdata:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U temetro -d temetro"]
      interval: 5s
      timeout: 5s
      retries: 10

  backend:
    build:
      context: .
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    environment:
      DATABASE_URL: postgres://temetro:temetro@db:5432/temetro
      # Secrets are optional: if unset, the entrypoint generates and persists
      # them (to the temetro_secrets volume). Pass real values here to override.
      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET:-}
      AI_CREDENTIALS_KEY: ${AI_CREDENTIALS_KEY:-}
      BETTER_AUTH_URL: http://localhost:4000
      FRONTEND_URL: http://localhost:3000
      PORT: "4000"
      NODE_ENV: production
      # Uploaded patient/lab files live here, on the temetro_uploads volume.
      UPLOAD_DIR: /var/lib/temetro/uploads
      SMTP_HOST: ${SMTP_HOST:-}
      SMTP_PORT: ${SMTP_PORT:-}
      SMTP_USER: ${SMTP_USER:-}
      SMTP_PASS: ${SMTP_PASS:-}
      SMTP_FROM: ${SMTP_FROM:-temetro <no-reply@temetro.local>}
    volumes:
      # Persists auto-generated secrets so they stay stable across restarts.
      - temetro_secrets:/var/lib/temetro
      # Persists uploaded files across restarts/rebuilds.
      - temetro_uploads:/var/lib/temetro/uploads
    ports:
      - "4000:4000"

  frontend:
    build:
      context: ../frontend
      args:
        NEXT_PUBLIC_API_URL: http://localhost:4000
    restart: unless-stopped
    depends_on:
      - backend
    environment:
      NEXT_PUBLIC_API_URL: http://localhost:4000
    ports:
      - "3000:3000"

  adminer:
    image: adminer:5
    profiles: ["tools"]
    restart: unless-stopped
    depends_on:
      - db
    ports:
      - "8080:8080"

volumes:
  temetro_pgdata:
  temetro_secrets:
  temetro_uploads: