version: '3.8'

services:
  # ── PHP-FPM Application ──────────────────────────────────────────────────
  app:
    build:
      context: ..
      dockerfile: docker/Dockerfile
    container_name: nis2-app
    restart: unless-stopped
    volumes:
      - ../application:/var/www/nis2-agile/application
      - ../public:/var/www/nis2-agile/public
    environment:
      - APP_ENV=${APP_ENV:-production}
      - APP_DEBUG=${APP_DEBUG:-false}
      - DB_HOST=db
      - DB_PORT=3306
      - DB_DATABASE=${DB_DATABASE:-nis2_agile_db}
      - DB_USERNAME=${DB_USERNAME:-nis2_user}
      - DB_PASSWORD=${DB_PASSWORD}
      - JWT_SECRET=${JWT_SECRET}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
    networks:
      - nis2-network
    depends_on:
      db:
        condition: service_healthy

  # ── Nginx Web Server ─────────────────────────────────────────────────────
  web:
    image: nginx:1.25-alpine
    container_name: nis2-web
    restart: unless-stopped
    ports:
      - "${WEB_PORT:-8080}:8080"
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
      - ../public:/var/www/nis2-agile/public:ro
    networks:
      - nis2-network
    depends_on:
      - app

  # ── MySQL Database ───────────────────────────────────────────────────────
  db:
    image: mysql:8.0
    container_name: nis2-db
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: ${DB_ROOT_PASSWORD}
      MYSQL_DATABASE: ${DB_DATABASE:-nis2_agile_db}
      MYSQL_USER: ${DB_USERNAME:-nis2_user}
      MYSQL_PASSWORD: ${DB_PASSWORD}
    ports:
      - "${DB_PORT:-3306}:3306"
    volumes:
      - nis2-db-data:/var/lib/mysql
      - ../docs/sql/001_initial_schema.sql:/docker-entrypoint-initdb.d/001_initial_schema.sql:ro
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-p${DB_ROOT_PASSWORD}"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s
    networks:
      - nis2-network

# ── Volumes ──────────────────────────────────────────────────────────────
volumes:
  nis2-db-data:
    driver: local

# ── Networks ─────────────────────────────────────────────────────────────
networks:
  nis2-network:
    driver: bridge