services:

# ----------------------------------------------------------------------
# Proxy inverse
#
# ----------------------------------------------------------------------
# Caddy
# Web server, load balancer, and reverse proxy
# https://caddyserver.com/
  caddy:
    image: lucaslorentz/caddy-docker-proxy:2.10
    restart: "no"
    ports:
      - "80:80"
      - "443:443/tcp"
      - "443:443/udp"
    networks:
      - caddy_net
    environment:
      CADDY_INGRESS_NETWORKS: ${COMPOSE_PROJECT_NAME}_caddy_net
    volumes:
      - caddy_config:/config
      - caddy_data:/data
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data:/srv/www:ro
    labels:
      caddy: localhost
      caddy.root: "* /srv/www"
      caddy.file_server: ""      # Active le serveur de fichiers statiques
      caddy.tls: internal        # HTTPS auto-signé géré par Caddy


# ----------------------------------------------------------------------
# Base de données relationnelles
#
# ----------------------------------------------------------------------
  database:
    image: iut/pgsql:2025-12
    environment:
      POSTGRES_INITDB_ARGS: "--locale-provider=icu --icu-locale=fr-FR"
      POSTGRES_PASSWORD: ${PG_PASSWORD:-!ChangeMe!}
      POSTGRES_USER: ${COMPOSE_PROJECT_NAME}
    volumes:
      - database_data:/var/lib/postgresql:rw
      - ./postgresql-entrypoint-initdb.d:/docker-entrypoint-initdb.d:Z
      - ./data:/tmp:Z
    ports:
      - "5432:5432"
    networks:
      - caddy_net
    healthcheck:
      test: ["CMD", "pg_isready", "--username", "${COMPOSE_PROJECT_NAME}", "--dbname", "${COMPOSE_PROJECT_NAME}"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 20s

# ----------------------------------------------------------------------
# Administration
#
# ----------------------------------------------------------------------
# pgAdmin
# Rich administration and development platform for PostgreSQL.
# https://www.pgadmin.org/
  pgadmin:
    image: dpage/pgadmin4:9.8
    depends_on:
      database:
        condition: service_healthy
      caddy:
        condition: service_started
    restart: "no"
    configs:
      - source: pgadmin_config
        target: /pgadmin4/servers.json
    volumes:
      - pgadmin:/var/lib/pgadmin/
    environment:
      PGADMIN_DEFAULT_EMAIL: ${PGADMIN_EMAIL}
      PGADMIN_DEFAULT_PASSWORD: ${PGADMIN_PASSWORD}
      PGADMIN_DISABLE_POSTFIX: true
    networks:
      - caddy_net
    labels:
      caddy: pgadmin.localhost
      caddy.reverse_proxy: "{{upstreams 80}}"
      caddy.tls: internal


# ----------------------------------------------------------------------
# Graphes
#
# ----------------------------------------------------------------------
# PostGraphile
# Instant GraphQL API
# https://www.graphile.org/postgraphile/
  postgraphile:
    image: iut/postgraphile:2025-12
    restart: "no"
    depends_on:
      database:
        condition: service_healthy
    command:
      [
        "--port", "80",
        "--schema", "${POSTGRAPHILE_SCHEMA:-public}",
        "--enhance-graphiql",
        "--cors",
        "--allow-explain",
        "--dynamic-json",
        "--append-plugins",
        "postgraphile-plugin-connection-filter,postgraphile-plugin-fulltext-filter,@graphile/postgis,postgraphile-plugin-connection-filter-postgis"
      ]
    networks:
      - caddy_net
    environment:
      - PGHOST=database
      - PGPORT=5432
      - PGUSER=${POSTGRAPHILE_USER:-postgraphile_user}
      - PGPASSWORD=${POSTGRAPHILE_PASSWORD:-9013}
      - PGDATABASE=${COMPOSE_PROJECT_NAME}
    labels:
      caddy: postgraphile.localhost
      caddy.reverse_proxy: "{{upstreams 80}}"
      caddy.tls: internal

# ----------------------------------------------------------------------
# Web API
#
# ----------------------------------------------------------------------




# ----------------------------------------------------------------------
# Business Intelligence
#
# ----------------------------------------------------------------------
  # superset:
  #   image: apache/superset:3.1.3
  #   depends_on:
  #     database:
  #       condition: service_healthy
  #   environment:
  #     SUPERSET_CONFIG_PATH: /app/pythonpath/superset_config.py
  #     SUPERSET_SECRET_KEY: ${SUPERSET_SECRET:-YOUR_OWN_RANDOM_GENERATED_SECRET_KEY}
  #     SUPERSET_LOAD_EXAMPLES: no
  #   volumes:
  #     - superset_home:/app/superset_home
  #     - ./superset_config.py:/app/pythonpath/superset_config.py:Z
  #   command: >
  #     sh -c "
  #     superset db upgrade &&
  #     superset fab create-admin --username admin --firstname Admin --lastname User --email admin@superset.com --password admin &&
  #     superset init &&
  #     superset run -h 0.0.0.0 -p 80 --with-threads --reload --debugger
  #     "
  #   networks:
  #     - caddy_net
  #   labels:
  #     caddy: superset.localhost
  #     caddy.reverse_proxy: "{{upstreams 80}}"
  #     caddy.tls: internal

  # metabase:
  #   image: metabase/metabase:v0.56.5.5
  #   depends_on:
  #     database:
  #       condition: service_healthy
  #   volumes:
  #     - /dev/urandom:/dev/random:ro
  #   environment:
  #     MB_DB_TYPE: postgres
  #     MB_DB_HOST: ${MB_DB_HOST:-database}
  #     MB_DB_PORT: 5432
  #     MB_DB_USER: metabase_user
  #     MB_DB_PASS: ${DB_ROOT_PASSWORD:-supermotdepasse}
  #     MB_DB_DBNAME: metabase
  #     MB_SITE_LOCALE: fr
  #     MB_ADMIN_EMAIL: etudiant@univ-lorraine.fr
  #     MB_ANON_TRACKING_ENABLED: false
  #     MB_CHECK_FOR_UPDATES: false
  #     MB_NO_SURVEYS: yes
  #     MB_START_OF_WEEK: monday
  #     MB_CUSTOM_FORMATTING: '{"type/Temporal":{"time_style":"HH:mm","date_style":"D MMMM, YYYY","date_abbreviate":true},"type/Currency":{"currency":"EUR"},"type/Number":{"number_separators":", "}}'
  #     MB_EMAIL_SMTP_HOST: mailpit
  #     MB_EMAIL_SMTP_PORT: 1025
  #     MB_EMAIL_FROM_ADDRESS: metabase@univ-lorraine.fr
  #   networks:
  #     - caddy_net
  #   labels:
  #     caddy: metabase.localhost
  #     caddy.reverse_proxy: "{{upstreams 3000}}"
  #     caddy.tls: internal

  # metabase-init:
  #   build:
  #     context: ./metabase
  #   depends_on:
  #     - metabase
  #   networks:
  #     - caddy_net

  #rabbitmq:
  #  image: rabbitmq:4.1.4-management
  #  ports:
  #    - "5672:5672"     # AMQP
  #    - "1883:1883"     # MQTT
  #  networks:
  #    - caddy_net
  #  environment:
  #    RABBITMQ_DEFAULT_USER: admin
  #    RABBITMQ_DEFAULT_PASS: admin
  #    RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS: "-rabbitmq_mqtt tcp_listeners [1883]"
  #  volumes:
  #    - rabbitmq_data:/var/lib/rabbitmq
  #  command: >
  #    sh -c "rabbitmq-plugins enable --offline rabbitmq_mqtt rabbitmq_management &&
  #           rabbitmq-server"
  #  labels:
  #    caddy: rabbitmq.localhost
  #    caddy.reverse_proxy: "{{upstreams 15672}}"
  #    caddy.tls: internal

# ----------------------------------------------------------------------
# Observabilité - Télémétrie
#
# ----------------------------------------------------------------------





  gatus:
    image: twinproduction/gatus:v5.26.0
    networks:
      - caddy_net
    labels:
      caddy: gatus.localhost
      caddy.reverse_proxy: "{{upstreams 8080}}"
      caddy.tls: internal

  mailpit:
    image: axllent/mailpit:v1.27
    restart: "no"
    ports:
      - 1025:1025
    networks:
      - caddy_net
    environment:
      TZ: Europe/Paris
    volumes:
      - mailpit:/data
    labels:
      caddy: mailpit.localhost
      caddy.reverse_proxy: "{{upstreams 8025}}"
      caddy.tls: internal

volumes:
  caddy_config:
  caddy_data:
  pgadmin:
  database_data:
  superset_home:
  rabbitmq_data:
  mailpit:

configs:
  pgadmin_config:
    file: ./pgadmin-servers.json

networks:
  caddy_net:
    driver: bridge