networks:
  nginx-bridge:
    external: true
services:
  spoon-next:
    image: git.gbrown.org/gib/${NEXT_CONTAINER_NAME}:latest
    container_name: ${NEXT_CONTAINER_NAME}
    hostname: ${NEXT_CONTAINER_NAME}
    domainname: ${NEXT_DOMAIN}
    networks:
    - ${NETWORK:-nginx-bridge}
    pull_policy: missing
    environment:
    - NODE_ENV=${NODE_ENV}
    - SENTRY_AUTH_TOKEN=${SENTRY_AUTH_TOKEN}
    - NEXT_PUBLIC_SITE_URL=${NEXT_PUBLIC_SITE_URL:-http://localhost:${NEXT_PORT:-3000}}
    - NEXT_PUBLIC_CONVEX_URL=${NEXT_PUBLIC_CONVEX_URL:-http://${BACKEND_CONTAINER_NAME:-spoon-backend}:${BACKEND_PORT:-3210}}
    - NEXT_PUBLIC_PLAUSIBLE_URL=${NEXT_PUBLIC_PLAUSIBLE_URL:-https://plausible.gbrown.org}
    - NEXT_PUBLIC_SENTRY_DSN=${NEXT_PUBLIC_SENTRY_DSN}
    - NEXT_PUBLIC_SENTRY_URL=${NEXT_PUBLIC_SENTRY_URL}
    - NEXT_PUBLIC_SENTRY_ORG=${NEXT_PUBLIC_SENTRY_ORG:-sentry}
    - NEXT_PUBLIC_SENTRY_PROJECT_NAME=${NEXT_PUBLIC_SENTRY_PROJECT_NAME}
    - SPOON_AGENT_WORKER_URL=${SPOON_AGENT_WORKER_URL:-http://spoon-agent-worker:3921}
    - SPOON_AGENT_WORKER_INTERNAL_TOKEN=${SPOON_AGENT_WORKER_INTERNAL_TOKEN}
    - SPOON_WORKER_TOKEN=${SPOON_WORKER_TOKEN}
    depends_on:
    - spoon-backend
    labels:
    - com.centurylinklabs.watchtower.enable=true
    tty: true
    stdin_open: true
    restart: unless-stopped
  spoon-agent-worker:
    image: git.gbrown.org/gib/spoon-agent-worker:latest
    container_name: spoon-agent-worker
    hostname: spoon-agent-worker
    domainname: worker.${NEXT_DOMAIN:-spoon.gbrown.org}
    networks:
    - ${NETWORK:-nginx-bridge}
    pull_policy: missing
    environment:
    - GITHUB_APP_ID=${GITHUB_APP_ID}
    - GITHUB_APP_PRIVATE_KEY=${GITHUB_APP_PRIVATE_KEY}
    - NEXT_PUBLIC_CONVEX_URL=https://api.spoon.gbrown.org
    - SPOON_AGENT_WORKER_ID=${SPOON_AGENT_WORKER_ID:-production-worker}
    - SPOON_AGENT_JOB_IMAGE=${SPOON_AGENT_JOB_IMAGE:-git.gbrown.org/gib/spoon-agent-job:latest}
    - SPOON_AGENT_RUNTIME=docker
    - SPOON_AGENT_NETWORK=${NETWORK:-nginx-bridge}
    - SPOON_AGENT_WORKDIR=/var/lib/spoon-agent/work
    - SPOON_AGENT_HOST_WORKDIR=/var/lib/spoon-agent/work
    - SPOON_AGENT_WORKER_HTTP_PORT=${SPOON_AGENT_WORKER_HTTP_PORT:-3921}
    - SPOON_AGENT_WORKER_INTERNAL_TOKEN=${SPOON_AGENT_WORKER_INTERNAL_TOKEN}
    - SPOON_AGENT_MAX_CONCURRENT_JOBS=${SPOON_AGENT_MAX_CONCURRENT_JOBS:-1}
    - SPOON_AGENT_JOB_TIMEOUT_MS=${SPOON_AGENT_JOB_TIMEOUT_MS:-1800000}
    - SPOON_WORKER_TOKEN=${SPOON_WORKER_TOKEN}
    volumes:
    - /run/user/1000/podman/podman.sock:/var/run/docker.sock
    - ./volumes/agent-work:/var/lib/spoon-agent/work:z
    labels:
    - com.centurylinklabs.watchtower.enable=true
    tty: true
    stdin_open: true
    restart: unless-stopped
    security_opt:
    - label:disable
  spoon-backend:
    image: ghcr.io/get-convex/convex-backend:${BACKEND_TAG:-latest}
    container_name: ${BACKEND_CONTAINER_NAME:-spoon-backend}
    hostname: ${BACKEND_CONTAINER_NAME:-spoon-backend}
    domainname: ${BACKEND_DOMAIN:-convex.spoon.gbrown.org}
    networks:
    - ${NETWORK:-nginx-bridge}
    volumes:
    - ./volumes/convex:/convex/data:z
    pull_policy: missing
    environment:
    - INSTANCE_NAME=${INSTANCE_NAME}
    - CONVEX_CLOUD_ORIGIN=${CONVEX_CLOUD_ORIGIN:-http://${BACKEND_CONTAINER_NAME:-spoon-backend}:${BACKEND_PORT:-3210}}
    - CONVEX_SITE_ORIGIN=${CONVEX_SITE_ORIGIN:-http://${BACKEND_CONTAINER_NAME:-spoon-backend}:${SITE_PROXY_PORT:-3211}}
    - DISABLE_BEACON=${DISABLE_BEACON:-true}
    - REDACT_LOGS_TO_CLIENT=${REDACT_LOGS_TO_CLIENT:-true}
    - DO_NOT_REQUIRE_SSL=${DO_NOT_REQUIRE_SSL:-false}
    - POSTGRES_URL=${POSTGRES_URL}
    labels:
    - com.centurylinklabs.watchtower.enable=true
    stdin_open: true
    tty: true
    restart: unless-stopped
    healthcheck:
      test: curl -f http://localhost:3210/version
      interval: 5s
      start_period: 10s
    stop_grace_period: 10s
    stop_signal: SIGINT
  spoon-dashboard:
    image: ghcr.io/get-convex/convex-dashboard:${DASHBOARD_TAG:-latest}
    container_name: ${DASHBOARD_CONTAINER_NAME:-spoon-dashboard}
    hostname: ${DASHBOARD_CONTAINER_NAME:-spoon-dashboard}
    domainname: ${DASHBOARD_DOMAIN:-dashboard.${BACKEND_DOMAIN:-spoon.gbrown.org}}
    networks:
    - ${NETWORK:-nginx-bridge}
    pull_policy: missing
    environment:
    - NEXT_PUBLIC_DEPLOYMENT_URL=${NEXT_PUBLIC_DEPLOYMENT_URL:-http://${BACKEND_CONTAINER_NAME:-spoon-backend}:${PORT:-3210}}
    depends_on:
      spoon-backend:
        condition: service_healthy
    labels:
    - com.centurylinklabs.watchtower.enable=true
    stdin_open: true
    tty: true
    restart: unless-stopped
    stop_grace_period: 10s
    stop_signal: SIGINT