docker-compose.yml

version: '3.8'

services:
  # PostgreSQL Database
  postgres:
    image: postgres:15-alpine
    container_name: weinsure-postgres
    environment:
      POSTGRES_DB: weinsure
      POSTGRES_USER: weinsure_user
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-weinsure_password}
    volumes:
      - postgres_data:/var/lib/postgresql/data
      - ./scripts/init-db.sql:/docker-entrypoint-initdb.d/init-db.sql
    ports:
      - "5432:5432"
    networks:
      - weinsure-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U weinsure_user -d weinsure"]
      interval: 10s
      timeout: 5s
      retries: 5

  # Redis Cache
  redis:
    image: redis:7-alpine
    container_name: weinsure-redis
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
    networks:
      - weinsure-network
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

  # WeInsure Application
  weinsure-app:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: weinsure-app
    environment:
      # Database
      DATABASE_URL: postgresql://weinsure_user:${POSTGRES_PASSWORD:-weinsure_password}@postgres:5432/weinsure
      REDIS_URL: redis://redis:6379
      
      # Application
      NODE_ENV: production
      
      # Blockchain
      RPC_URL: ${RPC_URL}
      PRIVATE_KEY: ${PRIVATE_KEY}
      NETWORK: ${NETWORK:-sepolia}
      
      # Contract Addresses
      POLICY_FACTORY_ADDRESS: ${POLICY_FACTORY_ADDRESS}
      POLICY_NFT_ADDRESS: ${POLICY_NFT_ADDRESS}
      ESCROW_ADDRESS: ${ESCROW_ADDRESS}
      TRIGGER_CONTRACT_ADDRESS: ${TRIGGER_CONTRACT_ADDRESS}
      MOCK_USDC_ADDRESS: ${MOCK_USDC_ADDRESS}
      
      # API Keys
      OPENWEATHER_API_KEY: ${OPENWEATHER_API_KEY}
      WEATHER_API_KEY: ${WEATHER_API_KEY}
      ETHERSCAN_API_KEY: ${ETHERSCAN_API_KEY}
      
      # Security
      JWT_SECRET: ${JWT_SECRET}
      
      # Frontend URLs
      NEXT_PUBLIC_API_URL: http://localhost:3001
      NEXT_PUBLIC_RPC_URL: ${RPC_URL}
      NEXT_PUBLIC_CHAIN_ID: ${CHAIN_ID:-11155111}
      NEXT_PUBLIC_POLICY_FACTORY_ADDRESS: ${POLICY_FACTORY_ADDRESS}
      NEXT_PUBLIC_POLICY_NFT_ADDRESS: ${POLICY_NFT_ADDRESS}
      NEXT_PUBLIC_ESCROW_ADDRESS: ${ESCROW_ADDRESS}
      NEXT_PUBLIC_TRIGGER_CONTRACT_ADDRESS: ${TRIGGER_CONTRACT_ADDRESS}
      NEXT_PUBLIC_MOCK_USDC_ADDRESS: ${MOCK_USDC_ADDRESS}
      NEXT_PUBLIC_ETHERSCAN_URL: ${ETHERSCAN_URL:-https://sepolia.etherscan.io}
    ports:
      - "3000:3000"  # Frontend
      - "3001:3001"  # Backend API
      - "3002:3002"  # Oracle Service
    volumes:
      - ./logs:/app/logs
      - app_data:/app/data
    networks:
      - weinsure-network
    depends_on:
      postgres:
        condition: service_healthy
      redis:
        condition: service_healthy
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "node", "scripts/health-check.js"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s

  # Nginx Reverse Proxy (Optional)
  nginx:
    image: nginx:alpine
    container_name: weinsure-nginx
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./ssl:/etc/nginx/ssl:ro
    networks:
      - weinsure-network
    depends_on:
      - weinsure-app
    restart: unless-stopped
    profiles:
      - production

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local
  app_data:
    driver: local

networks:
  weinsure-network:
    driver: bridge