Installation

# Database (use managed PostgreSQL in production)
POSTGRES_DB=hub_production
POSTGRES_USER=hub_prod_user
POSTGRES_PASSWORD=strong_random_password_here
DB_HOST=your-postgres-host.provider.com
DB_PORT=5432

# Backend
BACKEND_PORT=8080

# Auth0
AUTH0_ISSUER=https://your-tenant.auth0.com/
AUTH0_AUDIENCE=https://api.yourdomain.com

# Cloudinary
CLOUDINARY_CLOUD_NAME=your_production_cloud
CLOUDINARY_API_KEY=your_production_key
CLOUDINARY_API_SECRET=your_production_secret

# Email
MAIL_USERNAME=your_production_email
MAIL_PASSWORD=your_production_smtp_key
APP_MAIL_FROM=noreply@yourdomain.com

# Application
APP_ADMIN_EMAIL=admin@yourdomain.com
APP_FRONTEND_URL=https://yourdomain.com

# Disable Swagger in production
SWAGGER_ENABLED=false

services:
  backend:
    build:
      context: ./backend
      dockerfile: Dockerfile
    container_name: hub-backend
    restart: always
    environment:
      DB_HOST: ${DB_HOST}
      DB_PORT: ${DB_PORT}
      DB_NAME: ${POSTGRES_DB}
      DB_USER: ${POSTGRES_USER}
      DB_PASSWORD: ${POSTGRES_PASSWORD}
      AUTH0_ISSUER: ${AUTH0_ISSUER}
      AUTH0_AUDIENCE: ${AUTH0_AUDIENCE}
      CLOUDINARY_CLOUD_NAME: ${CLOUDINARY_CLOUD_NAME}
      CLOUDINARY_API_KEY: ${CLOUDINARY_API_KEY}
      CLOUDINARY_API_SECRET: ${CLOUDINARY_API_SECRET}
      APP_ADMIN_EMAIL: ${APP_ADMIN_EMAIL}
      MAIL_USERNAME: ${MAIL_USERNAME}
      MAIL_PASSWORD: ${MAIL_PASSWORD}
      APP_MAIL_FROM: ${APP_MAIL_FROM}
      APP_FRONTEND_URL: ${APP_FRONTEND_URL}
      SWAGGER_ENABLED: ${SWAGGER_ENABLED}
      SPRING_PROFILES_ACTIVE: production
    ports:
      - "8080:8080"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/actuator/health"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Add nginx for reverse proxy
  nginx:
    image: nginx:alpine
    container_name: hub-nginx
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./ssl:/etc/nginx/ssl:ro
    depends_on:
      - backend

upstream backend {
    server backend:8080;
}

server {
    listen 80;
    server_name api.yourdomain.com;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name api.yourdomain.com;

    ssl_certificate /etc/nginx/ssl/fullchain.pem;
    ssl_certificate_key /etc/nginx/ssl/privkey.pem;

    location / {
        proxy_pass http://backend;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}