services:
  # نقطه ورود واحد — مسیریابی / (سایت استاتیک)، /api (بک‌اند) و /media (MinIO)
  traefik:
    image: traefik:v3
    restart: unless-stopped
    command:
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
    ports:
      - "5173:80"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro

  db:
    image: postgres:17-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: aramesh
      POSTGRES_PASSWORD: aramesh
      POSTGRES_DB: arameshplaza
    volumes:
      - db_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U aramesh -d arameshplaza"]
      interval: 5s
      timeout: 5s
      retries: 12

  minio:
    image: minio/minio:latest
    restart: unless-stopped
    command: server /data --console-address ":9001"
    environment:
      MINIO_ROOT_USER: aramesh
      MINIO_ROOT_PASSWORD: aramesh-minio-secret
    volumes:
      - minio_data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:9000/minio/health/live"]
      interval: 5s
      timeout: 5s
      retries: 12
    ports:
      - "9001:9001" # کنسول MinIO
    labels:
      - traefik.enable=true
      - traefik.http.routers.media.rule=PathPrefix(`/media`)
      - traefik.http.routers.media.entrypoints=web
      - traefik.http.routers.media.priority=100
      - traefik.http.routers.media.middlewares=media-rewrite
      - traefik.http.middlewares.media-rewrite.replacepathregex.regex=^/media/(.*)
      - traefik.http.middlewares.media-rewrite.replacepathregex.replacement=/aramesh-media/$$1
      - traefik.http.services.media.loadbalancer.server.port=9000

  # یک‌بار اجرا می‌شود: ساخت باکت و بازگذاشتن خواندن عمومی برای سرو تصاویر
  minio-setup:
    image: minio/mc:latest
    depends_on:
      minio:
        condition: service_healthy
    environment:
      MINIO_ROOT_USER: aramesh
      MINIO_ROOT_PASSWORD: aramesh-minio-secret
      MINIO_BUCKET: aramesh-media
    restart: "no"
    entrypoint: >
      /bin/sh -c "
      mc alias set local http://minio:9000 $$MINIO_ROOT_USER $$MINIO_ROOT_PASSWORD &&
      mc mb --ignore-existing local/$$MINIO_BUCKET &&
      mc anonymous set download local/$$MINIO_BUCKET &&
      echo 'minio-setup: bucket ready'
      "

  backend:
    build: ./backend
    restart: unless-stopped
    environment:
      DATABASE_URL: postgresql+psycopg://aramesh:aramesh@db:5432/arameshplaza
      SECRET_KEY: change-me-to-a-long-random-string
      CORS_ORIGINS: '["http://localhost:5173","http://127.0.0.1:5173"]'
      ADMIN_USERNAME: admin
      ADMIN_PASSWORD: aramesh123
      S3_ENDPOINT: http://minio:9000
      S3_ACCESS_KEY: aramesh
      S3_SECRET_KEY: aramesh-minio-secret
      S3_BUCKET: aramesh-media
      MEDIA_PUBLIC_BASE: /media
    depends_on:
      db:
        condition: service_healthy
      minio:
        condition: service_healthy
    labels:
      - traefik.enable=true
      - traefik.http.routers.api.rule=PathPrefix(`/api`)
      - traefik.http.routers.api.entrypoints=web
      - traefik.http.routers.api.priority=100
      - traefik.http.services.api.loadbalancer.server.port=8000

  # فقط سرو فایل‌های استاتیک SPA — همه مسیریابی‌ها روی Traefik است
  frontend:
    build:
      context: ./frontend
      args:
        VITE_API_URL: ""
    restart: unless-stopped
    depends_on:
      - backend
      - minio
    labels:
      - traefik.enable=true
      - traefik.http.routers.web.rule=PathPrefix(`/`)
      - traefik.http.routers.web.entrypoints=web
      - traefik.http.routers.web.priority=1
      - traefik.http.services.web.loadbalancer.server.port=80

volumes:
  db_data:
  minio_data: