docker-compose.yml

services:
    db:
        image: postgres:16-alpine
        restart: unless-stopped
        environment:
            POSTGRES_USER: stackboard
            POSTGRES_PASSWORD: stackboard
            POSTGRES_DB: stackboard
        # Loopback only: this database ships with well-known credentials, and
        # binding it to every interface offers it to whatever network the
        # machine happens to be on. Everything that needs it (the app,
        # drizzle-kit, psql) connects from this machine.
        ports:
            - '127.0.0.1:5432:5432'
        volumes:
            - stackboard_pgdata:/var/lib/postgresql/data
        healthcheck:
            test: ['CMD-SHELL', 'pg_isready -U stackboard']
            interval: 5s
            timeout: 5s
            retries: 10

    # Optional: exercise attachments against a real S3-compatible backend
    # instead of local disk. Opt in by setting S3_ENDPOINT=http://localhost:9000
    # (plus S3_BUCKET/S3_ACCESS_KEY_ID/S3_SECRET_ACCESS_KEY) in .env — left
    # unset, lib/storage/index.ts falls back to local disk and this service
    # is simply unused. Console at http://localhost:9001.
    minio:
        image: minio/minio:latest
        restart: unless-stopped
        command: server /data --console-address ":9001"
        environment:
            MINIO_ROOT_USER: minioadmin
            MINIO_ROOT_PASSWORD: minioadmin
        # Loopback only, same reasoning as `db` above — minioadmin/minioadmin
        # is not a credential to expose to a network.
        ports:
            - '127.0.0.1:9000:9000'
            - '127.0.0.1:9001:9001'
        volumes:
            - stackboard_minio:/data
        healthcheck:
            test:
                ['CMD', 'curl', '-f', 'http://localhost:9000/minio/health/live']
            interval: 5s
            timeout: 5s
            retries: 5

volumes:
    stackboard_pgdata:
    stackboard_minio: