docker-compose.yml

version: '3.9'

# =============================================================================
# Funding Application Platform - Docker Compose Configuration
# Supports: PostgreSQL, Redis, Backend, Frontend, ClamAV
# Compliance: GDPR/UK Data Protection Act 2018 ready
# Target: 99.5% availability during open call windows
# =============================================================================

services:
  # ==========================================================================
  # PostgreSQL Database
  # ==========================================================================
  postgres:
    image: postgres:16-alpine
    container_name: funding_platform_db
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
      POSTGRES_DB: ${POSTGRES_DB:-funding_platform}
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./database/init:/docker-entrypoint-initdb.d:ro
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-postgres} -d ${POSTGRES_DB:-funding_platform}"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ==========================================================================
  # Redis Cache & Session Store
  # ==========================================================================
  redis:
    image: redis:7-alpine
    container_name: funding_platform_redis
    restart: unless-stopped
    command: redis-server --requirepass ${REDIS_PASSWORD:-redis} --appendonly yes --maxmemory 256mb --maxmemory-policy allkeys-lru
    volumes:
      - redis_data:/data
    ports:
      - "${REDIS_PORT:-6379}:6379"
    healthcheck:
      test: ["CMD", "redis-cli", "-a", "${REDIS_PASSWORD:-redis}", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ==========================================================================
  # Backend API
  # ==========================================================================
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
      args:
        NODE_ENV: ${NODE_ENV:-production}
    container_name: funding_platform_api
    restart: unless-stopped
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      PORT: 4000
      DATABASE_URL: postgresql://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@postgres:5432/${POSTGRES_DB:-funding_platform}
      REDIS_URL: redis://:${REDIS_PASSWORD:-redis}@redis:6379
      JWT_SECRET: ${JWT_SECRET:-change-me-in-production}
      JWT_EXPIRES_IN: ${JWT_EXPIRES_IN:-30m}
      SESSION_SECRET: ${SESSION_SECRET:-change-me-in-production}
      CORS_ORIGIN: ${CORS_ORIGIN:-http://localhost:3000}
      # ClamAV Configuration
      CLAMAV_HOST: clamav
      CLAMAV_PORT: 3310
      # File Storage
      STORAGE_DRIVER: ${STORAGE_DRIVER:-local}
      STORAGE_LOCAL_PATH: /app/uploads
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID:-}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY:-}
      AWS_REGION: ${AWS_REGION:-eu-west-2}
      AWS_S3_BUCKET: ${AWS_S3_BUCKET:-}
      # Email
      SMTP_HOST: ${SMTP_HOST:-mailhog}
      SMTP_PORT: ${SMTP_PORT:-1025}
      EMAIL_FROM_ADDRESS: ${EMAIL_FROM_ADDRESS:-noreply@funding-platform.gov.uk}
      # Timezone (UK compliance)
      TZ: Europe/London
    volumes:
      - uploads_data:/app/uploads
      - ./backend/logs:/app/logs
    ports:
      - "${BACKEND_PORT:-4000}:4000"
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:4000/health"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "5"

  # ==========================================================================
  # Frontend Application
  # ==========================================================================
  frontend:
    build:
      context: ./frontend
      dockerfile: Dockerfile
      args:
        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:4000}
    container_name: funding_platform_web
    restart: unless-stopped
    environment:
      NODE_ENV: ${NODE_ENV:-development}
      NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:4000}
      TZ: Europe/London
    ports:
      - "${FRONTEND_PORT:-3000}:3000"
    depends_on:
      - backend
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ==========================================================================
  # ClamAV Virus Scanner
  # ==========================================================================
  clamav:
    image: clamav/clamav:stable
    container_name: funding_platform_clamav
    restart: unless-stopped
    volumes:
      - clamav_data:/var/lib/clamav
    ports:
      - "${CLAMAV_PORT:-3310}:3310"
    healthcheck:
      test: ["CMD", "clamdscan", "--ping", "3"]
      interval: 60s
      timeout: 10s
      retries: 3
      start_period: 120s
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ==========================================================================
  # MinIO (S3-compatible storage for local development)
  # ==========================================================================
  minio:
    image: minio/minio:latest
    container_name: funding_platform_minio
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: ${MINIO_ROOT_USER:-minioadmin}
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD:-minioadmin}
    volumes:
      - minio_data:/data
    ports:
      - "9000:9000"
      - "9001:9001"
    profiles:
      - dev
      - full
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 30s
      timeout: 20s
      retries: 3
    networks:
      - funding_network

  # ==========================================================================
  # MailHog (Email testing for development)
  # ==========================================================================
  mailhog:
    image: mailhog/mailhog:latest
    container_name: funding_platform_mailhog
    restart: unless-stopped
    ports:
      - "1025:1025"  # SMTP
      - "8025:8025"  # Web UI
    profiles:
      - dev
      - full
    networks:
      - funding_network

  # ==========================================================================
  # Nginx Reverse Proxy (Production)
  # ==========================================================================
  nginx:
    image: nginx:1.25-alpine
    container_name: funding_platform_nginx
    restart: unless-stopped
    profiles:
      - production
    depends_on:
      - backend
      - frontend
    volumes:
      - ./infrastructure/nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./infrastructure/nginx/conf.d:/etc/nginx/conf.d:ro
      - ./infrastructure/nginx/ssl:/etc/nginx/ssl:ro
      - nginx_logs:/var/log/nginx
    ports:
      - "80:80"
      - "443:443"
    healthcheck:
      test: ["CMD", "nginx", "-t"]
      interval: 30s
      timeout: 10s
      retries: 3
    networks:
      - funding_network
    logging:
      driver: "json-file"
      options:
        max-size: "50m"
        max-file: "5"

# =============================================================================
# Volumes
# =============================================================================
volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local
  clamav_data:
    driver: local
  minio_data:
    driver: local
  uploads_data:
    driver: local
  nginx_logs:
    driver: local

# =============================================================================
# Networks
# =============================================================================
networks:
  funding_network:
    driver: bridge
    name: funding_platform_network