version: '3.8'

services:
  postiz:
    image: ghcr.io/gitroomhq/postiz-app:latest
    container_name: postiz
    restart: unless-stopped
    env_file: .env
    depends_on:
      postiz-postgres:
        condition: service_healthy
      postiz-redis:
        condition: service_healthy
    networks:
      - traefik-public
      - postiz-internal
    volumes:
      - postiz-uploads:/uploads
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik-public"
      
      # Main frontend: social.ai-impress.com (with Authelia)
      - "traefik.http.routers.postiz.rule=Host(`social.ai-impress.com`)"
      - "traefik.http.routers.postiz.entrypoints=websecure"
      - "traefik.http.routers.postiz.tls.certresolver=cloudflare"
      - "traefik.http.routers.postiz.middlewares=authentik@file"
      
      # Uploads subdomain: uploads.ai-impress.com (without Authelia, for social media bots)
      - "traefik.http.routers.postiz-uploads.rule=Host(`uploads.ai-impress.com`)"
      - "traefik.http.routers.postiz-uploads.entrypoints=websecure"
      - "traefik.http.routers.postiz-uploads.tls.certresolver=cloudflare"
      
      # Service port
      - "traefik.http.services.postiz.loadbalancer.server.port=5000"

  postiz-postgres:
    image: postgres:16-alpine
    container_name: postiz-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: postiz
      POSTGRES_USER: postiz
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
    networks:
      - postiz-internal
    volumes:
      - postiz-postgres-data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postiz -d postiz"]
      interval: 10s
      timeout: 5s
      retries: 5

  postiz-redis:
    image: redis:7-alpine
    container_name: postiz-redis
    restart: unless-stopped
    networks:
      - postiz-internal
    volumes:
      - postiz-redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  postiz-uploads:
    external: true
    name: postiz_postiz-uploads
  postiz-postgres-data:
    external: true
    name: postiz_postiz-postgres-data
  postiz-redis-data:
    external: true
    name: postiz_postiz-redis-data

networks:
  traefik-public:
    external: true
  postiz-internal:
    driver: bridge