docker-compose.yml

# Base docker-compose — shared service definitions
# Use with docker-compose.staging.yml or docker-compose.prod.yml

services:
  backend:
    image: ${ARTIFACT_REGISTRY}/tenantguard-backend:${IMAGE_TAG:-latest}
    restart: unless-stopped
    env_file: ./backend/.env
    environment:
      - DJANGO_SETTINGS_MODULE=core.settings
    volumes:
      - ./ssl_certs:/ssl_certs:ro
    expose:
      - "8000"
    depends_on:
      - cloud-sql-proxy

  frontend:
    image: ${ARTIFACT_REGISTRY}/tenantguard-frontend:${IMAGE_TAG:-latest}
    restart: unless-stopped
    env_file: ./frontend/.env.local
    expose:
      - "3000"

  nginx:
    image: nginx:1.27-alpine
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./ssl_certs:/etc/nginx/ssl:ro
    depends_on:
      - backend
      - frontend

  cloud-sql-proxy:
    image: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2
    restart: unless-stopped
    command:
      - "--address=0.0.0.0"
      - "--port=5432"
      - "${CLOUD_SQL_INSTANCE_CONNECTION_NAME}"
    volumes:
      - ./gcp-credentials.json:/gcp-credentials.json:ro
    environment:
      - GOOGLE_APPLICATION_CREDENTIALS=/gcp-credentials.json
    expose:
      - "5432"