services:
  app:
    image: niayesh-hospital:latest
    container_name: hospital-app
    restart: unless-stopped
    expose:
      - "80"
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80"]
      interval: 30s
      timeout: 10s
      retries: 3
    logging:
      driver: json-file
      options:
        max-size: 10m
  nginx:
    image: jonasal/nginx-certbot:latest
    container_name: hospital-nginx
    restart: unless-stopped
    ports:
      - 4200:443  # HTTPS on host port 4200 (access via https://hospital.networkwizard.xyz:4200)
    environment:
      - CERTBOT_EMAIL=test@test.com
      - ENVSUBST_TEMPLATE_SUFFIX=.tmpl
      - CERTBOT_DISABLED=true
    volumes:
      - ./nginx_user_conf.d:/etc/nginx/user_conf.d:ro
      - letsencrypt:/etc/letsencrypt
      - /home/devroot/HIS/certs/fullchain.pem:/etc/nginx/ssl/origin_cert.pem:ro
      - /home/devroot/HIS/certs/prvkey.pem:/etc/nginx/ssl/origin_key.key:ro
    depends_on:
      app:
        condition: service_healthy
    logging:
      driver: json-file
      options:
        max-size: 10m
networks:
  default:
    driver: bridge
volumes:
  letsencrypt: