services:
  # ============================================================================
  # D3RO Voice — Core Cloud API Server & Official Promotion Landing Site
  # ============================================================================
  d3ro-api-server:
    build:
      context: ./apps/api-server
      dockerfile: Dockerfile
    image: d3ro-voice-api:latest
    container_name: d3ro_voice_api
    restart: unless-stopped
    ports:
      - "${PORT:-5050}:5000"
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
      - ASPNETCORE_URLS=http://+:5000
      - DATA_DIR=/app/data
      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
      - JWT_ISSUER=${JWT_ISSUER:?JWT_ISSUER is required}
      - JWT_AUDIENCE=${JWT_AUDIENCE:?JWT_AUDIENCE is required}
      - ADMIN_BOOTSTRAP_TOKEN=${ADMIN_BOOTSTRAP_TOKEN:?ADMIN_BOOTSTRAP_TOKEN is required}
      - D3RO_API_TOKEN=${D3RO_API_TOKEN:?D3RO_API_TOKEN is required}
      - CORS_ALLOWED_ORIGINS=${CORS_ALLOWED_ORIGINS:?CORS_ALLOWED_ORIGINS is required}
      - ALLOWED_HOSTS=${ALLOWED_HOSTS:?ALLOWED_HOSTS is required}
      - TZ=${TZ:-Asia/Seoul}
    volumes:
      - ${DATA_PATH:-./data}:/app/data
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ============================================================================
  # D3RO Voice — Full Next.js 15 Admin CRM Portal (@d3ro/admin)
  # ============================================================================
  d3ro-admin:
    build:
      context: .
      dockerfile: apps/admin/Dockerfile
    image: d3ro-voice-admin:latest
    container_name: d3ro_voice_admin
    restart: unless-stopped
    ports:
      - "${ADMIN_PORT:-3001}:3001"
    environment:
      - NODE_ENV=production
      - PORT=3001
      - API_SERVER_URL=${API_SERVER_URL:?API_SERVER_URL is required}
      - ADMIN_SESSION_SECRET=${ADMIN_SESSION_SECRET:?ADMIN_SESSION_SECRET is required}
      - ADMIN_COOKIE_SECURE=${ADMIN_COOKIE_SECURE:-true}
    depends_on:
      - d3ro-api-server
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ============================================================================
  # D3RO Voice — Web App (@d3ro/web), 공개 경로 https://d3ro.chanpaca.net/app
  # 사이트 브리지 워커가 /app/* 를 Cloudflare Tunnel 을 거쳐 이 컨테이너로 보낸다.
  # ============================================================================
  d3ro-web:
    build:
      context: .
      dockerfile: apps/web/Dockerfile
      args:
        NEXT_PUBLIC_SUPABASE_URL: ${NEXT_PUBLIC_SUPABASE_URL:-}
        NEXT_PUBLIC_SUPABASE_ANON_KEY: ${NEXT_PUBLIC_SUPABASE_ANON_KEY:-}
        NEXT_PUBLIC_PAYPLE_CLIENT_KEY: ${NEXT_PUBLIC_PAYPLE_CLIENT_KEY:-}
    image: d3ro-voice-web:latest
    container_name: d3ro_voice_web
    restart: unless-stopped
    ports:
      - "${WEB_PORT:-3002}:3002"
    # NEXT_PUBLIC_SUPABASE_URL / NEXT_PUBLIC_SUPABASE_ANON_KEY / NEXT_PUBLIC_PAYPLE_CLIENT_KEY 는
    # 이미지 빌드 때 번들에 들어간다(build args). 런타임에 넣어도 바뀌지 않으므로 여기 두지 않는다.
    environment:
      - NODE_ENV=production
      - PORT=3002
      - TZ=${TZ:-Asia/Seoul}
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

  # ============================================================================
  # Optional: Local AI Engine on NAS (Ollama)
  # Run with: docker compose --profile ai up -d
  # ============================================================================
  ollama:
    image: ollama/ollama:latest
    container_name: d3ro_ollama
    restart: unless-stopped
    profiles:
      - ai
    ports:
      - "11434:11434"
    volumes:
      - ${OLLAMA_DATA_PATH:-./ollama_data}:/root/.ollama
    logging:
      driver: "json-file"
      options:
        max-size: "10m"
        max-file: "3"

volumes:
  d3ro_data: