# ============================================================================
# D3RO Voice — Standalone NAS Docker Compose Specification
# Includes: Core API + Promotional Site + Full Next.js Admin CRM
# ============================================================================
services:
  d3ro-api-server:
    image: d3ro-voice-api:latest
    container_name: d3ro_voice_api
    restart: unless-stopped
    ports:
      - "${PORT:-5050}:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
      - ASPNETCORE_URLS=http://+:5000
      - DATA_DIR=/app/data
      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
      - JWT_ISSUER=${JWT_ISSUER:?JWT_ISSUER is required}
      - JWT_AUDIENCE=${JWT_AUDIENCE:?JWT_AUDIENCE is required}
      - ADMIN_BOOTSTRAP_TOKEN=${ADMIN_BOOTSTRAP_TOKEN:?ADMIN_BOOTSTRAP_TOKEN is required}
      - D3RO_API_TOKEN=${D3RO_API_TOKEN:?D3RO_API_TOKEN is required}
      - CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS:?CORS_ALLOWED_ORIGINS is required}
      - ALLOWED_HOSTS=${ALLOWED_HOSTS:?ALLOWED_HOSTS is required}
      - TZ=${TZ:-Asia/Seoul}
    volumes:
      - ${DATA_PATH:-./data}:/app/data
      # Play policy/legal endpoints must survive API image recreation without
      # replacing unrelated static assets embedded in the running image.
      - /volume1/docker/d3ro/wwwroot/privacy:/app/wwwroot/privacy:ro
      - /volume1/docker/d3ro/wwwroot/terms:/app/wwwroot/terms:ro
      - /volume1/docker/d3ro/wwwroot/delete-account:/app/wwwroot/delete-account:ro
      - /volume1/docker/d3ro/wwwroot/legal.css:/app/wwwroot/legal.css:ro
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  d3ro-admin:
    image: d3ro-voice-admin:latest
    container_name: d3ro_voice_admin
    restart: unless-stopped
    ports:
      - "${ADMIN_PORT:-3001}:3001"
    environment:
      - NODE_ENV=production
      - PORT=3001
      - NEXT_PUBLIC_API_URL=${PUBLIC_URL:-https://d3ro.chanpaca.net}
      - API_SERVER_URL=${API_SERVER_URL:?API_SERVER_URL is required}
      - ADMIN_SESSION_SECRET=${ADMIN_SESSION_SECRET:?ADMIN_SESSION_SECRET is required}
      - ADMIN_COOKIE_SECURE=${ADMIN_COOKIE_SECURE:-true}
      - SUPABASE_URL=${SUPABASE_URL:?SUPABASE_URL is required}
      - SUPABASE_SERVICE_ROLE_KEY=${SUPABASE_SERVICE_ROLE_KEY:?SUPABASE_SERVICE_ROLE_KEY is required}
    depends_on:
      - d3ro-api-server
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"