docker-compose.yml

# ✨ built by nich
# 🌐 GitHub: github.com/nirholas
# 💫 Keep calm and code on 🧘

services:
  # Frontend application
  frontend:
    build:
      context: .
      dockerfile: Dockerfile
    ports:
      - "3000:80"
    environment:
      - NODE_ENV=production
      - VITE_API_URL=${VITE_API_URL:?Set VITE_API_URL to your production backend URL}
    depends_on:
      - backend
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost/"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s
    networks:
      - web3-network

  # Backend API server (NEW!)
  backend:
    build:
      context: ./server
      dockerfile: Dockerfile
    ports:
      - "3001:3001"
    env_file:
      - ./server/.env
    environment:
      - NODE_ENV=production
      - PORT=3001
      - CORS_ORIGIN=${CORS_ORIGIN:?Set CORS_ORIGIN to your production frontend URL}
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "node", "-e", "require('http').get('http://localhost:3001/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"]
      interval: 30s
      timeout: 3s
      retries: 3
      start_period: 5s
    networks:
      - web3-network

  # Redis for caching (optional)
  redis:
    image: redis:7-alpine
    # Security: Bind to localhost only and require password
    # IMPORTANT: Set REDIS_PASSWORD in your environment — server will not start without it
    command: >-
      sh -c 'if [ -z "$REDIS_PASSWORD" ]; then echo "ERROR: REDIS_PASSWORD must be set" && exit 1; fi && redis-server --requirepass "$REDIS_PASSWORD" --bind 127.0.0.1'
    ports:
      - "127.0.0.1:6379:6379"
    volumes:
      - redis-data:/data
    restart: unless-stopped
    networks:
      - web3-network

volumes:
  redis-data:

networks:
  web3-network:
    driver: bridge