docker-compose.yml

# Load environment variables from .env file
# Copy .env.example to .env and customize before running
#
# USAGE:
#   Development (with local DB): docker-compose --profile local up
#   Production (external DB):    docker-compose up
#
# Set DATABASE_URL in .env for external database (e.g., RDS):
#   DATABASE_URL=postgresql://user:pass@rds-host:5432/dbname

services:
  # PostgreSQL Database (optional - use profile "local" for local development)
  db:
    image: postgres:16-alpine
    container_name: aws-inventory-db
    profiles: ["local"]
    environment:
      POSTGRES_DB: ${POSTGRES_DB:-awsinventory}
      POSTGRES_USER: ${POSTGRES_USER:-awsinventory}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}
    volumes:
      - postgres_data:/var/lib/postgresql/data
    networks:
      - aws-inventory-network
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-awsinventory}"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  # Redis for Celery
  redis:
    image: redis:7-alpine
    container_name: aws-inventory-redis
    volumes:
      - redis_data:/data
    networks:
      - aws-inventory-network
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 5s
      retries: 5
    restart: unless-stopped

  # Django Application
  web:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    container_name: aws-inventory-web
    command: gunicorn aws_inventory.wsgi:application --bind 0.0.0.0:8000 --workers 4 --timeout 120 --access-logfile - --error-logfile -
    environment:
      # Django settings
      DJANGO_SETTINGS_MODULE: aws_inventory.settings
      SECRET_KEY: ${SECRET_KEY}
      DEBUG: ${DEBUG:-False}
      ALLOWED_HOSTS: ${ALLOWED_HOSTS:-localhost,127.0.0.1}

      # Database
      DATABASE_URL: ${DATABASE_URL}
      POSTGRES_HOST: ${DATABASE_HOST:-db}
      POSTGRES_PORT: 5432
      POSTGRES_DB: ${POSTGRES_DB:-awsinventory}
      POSTGRES_USER: ${POSTGRES_USER:-awsinventory}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}

      # AWS credentials (optional - can be provided at runtime)
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID:-}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY:-}
      AWS_SESSION_TOKEN: ${AWS_SESSION_TOKEN:-}
      AWS_DEFAULT_REGION: ${AWS_DEFAULT_REGION:-us-east-1}
      AWS_REGIONS: ${AWS_REGIONS:-us-east-1,us-west-2}

      # Superuser creation (optional)
      DJANGO_SUPERUSER_USERNAME: ${DJANGO_SUPERUSER_USERNAME:-admin}
      DJANGO_SUPERUSER_PASSWORD: ${DJANGO_SUPERUSER_PASSWORD:-}
      DJANGO_SUPERUSER_EMAIL: ${DJANGO_SUPERUSER_EMAIL:-admin@example.com}

      # Celery settings
      CELERY_BROKER_URL: redis://redis:6379/0
      CELERY_RESULT_BACKEND: redis://redis:6379/0
    volumes:
      - static_volume:/app/staticfiles
      - logs_volume:/app/logs
    networks:
      - aws-inventory-network
    depends_on:
      redis:
        condition: service_healthy
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8000/health/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    restart: unless-stopped

  # Nginx Reverse Proxy
  nginx:
    image: nginx:1.25-alpine
    container_name: aws-inventory-nginx
    ports:
      - "${HTTP_PORT:-80}:80"
      - "${HTTPS_PORT:-443}:443"
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - static_volume:/app/staticfiles:ro
      - ./ssl:/etc/nginx/ssl:ro  # Optional: for SSL certificates
    networks:
      - aws-inventory-network
    depends_on:
      - web
    restart: unless-stopped

  # Celery Worker
  celery:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    # container_name: aws-inventory-celery
    command: celery -A aws_inventory worker -l INFO --concurrency=${CELERY_WORKER_CONCURRENCY:-20}
    environment:
      # Django settings
      DJANGO_SETTINGS_MODULE: aws_inventory.settings
      SECRET_KEY: ${SECRET_KEY}
      DEBUG: ${DEBUG:-False}

      # Database
      DATABASE_URL: ${DATABASE_URL}
      POSTGRES_HOST: ${DATABASE_HOST:-db}
      POSTGRES_PORT: 5432
      POSTGRES_DB: ${POSTGRES_DB:-awsinventory}
      POSTGRES_USER: ${POSTGRES_USER:-awsinventory}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}

      # Celery settings
      CELERY_BROKER_URL: redis://redis:6379/0
      CELERY_RESULT_BACKEND: redis://redis:6379/0

      # AWS credentials (optional - can be provided at runtime)
      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID:-}
      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY:-}
      AWS_SESSION_TOKEN: ${AWS_SESSION_TOKEN:-}
      AWS_DEFAULT_REGION: ${AWS_DEFAULT_REGION:-us-east-1}
      AWS_REGIONS: ${AWS_REGIONS:-us-east-1,us-west-2}
    volumes:
      - logs_volume:/app/logs
    networks:
      - aws-inventory-network
    depends_on:
      redis:
        condition: service_healthy
    restart: unless-stopped

  # Celery Beat Scheduler (for periodic tasks)
  celery-beat:
    build:
      context: .
      dockerfile: Dockerfile
      target: production
    container_name: aws-inventory-celery-beat
    command: celery -A aws_inventory beat -l INFO
    environment:
      # Django settings
      DJANGO_SETTINGS_MODULE: aws_inventory.settings
      SECRET_KEY: ${SECRET_KEY}
      DEBUG: ${DEBUG:-False}

      # Database
      DATABASE_URL: ${DATABASE_URL}
      POSTGRES_HOST: ${DATABASE_HOST:-db}
      POSTGRES_PORT: 5432
      POSTGRES_DB: ${POSTGRES_DB:-awsinventory}
      POSTGRES_USER: ${POSTGRES_USER:-awsinventory}
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-changeme}

      # Celery settings
      CELERY_BROKER_URL: redis://redis:6379/0
      CELERY_RESULT_BACKEND: redis://redis:6379/0

      # Scheduled polling settings
      SCHEDULED_POLLING_ENABLED: ${SCHEDULED_POLLING_ENABLED:-true}
      SCHEDULED_POLLING_MAX_CONCURRENT: ${SCHEDULED_POLLING_MAX_CONCURRENT:-20}
      SCHEDULED_POLLING_STAGGER_SECONDS: ${SCHEDULED_POLLING_STAGGER_SECONDS:-1}
    volumes:
      - logs_volume:/app/logs
    networks:
      - aws-inventory-network
    depends_on:
      redis:
        condition: service_healthy
    restart: unless-stopped

  # Flower - Celery Monitoring
  flower:
    image: mher/flower:2.0
    container_name: aws-inventory-flower
    command: celery --broker=redis://redis:6379/0 flower --port=5555
    environment:
      CELERY_BROKER_URL: redis://redis:6379/0
      CELERY_RESULT_BACKEND: redis://redis:6379/0
      FLOWER_BASIC_AUTH: ${FLOWER_USER:-admin}:${FLOWER_PASSWORD:-changeme}
    ports:
      - "${FLOWER_PORT:-5555}:5555"
    networks:
      - aws-inventory-network
    depends_on:
      redis:
        condition: service_healthy
    restart: unless-stopped

volumes:
  postgres_data:
    driver: local
  redis_data:
    driver: local
  static_volume:
    driver: local
  logs_volume:
    driver: local

networks:
  aws-inventory-network:
    driver: bridge