# ============================================================
# GUARDiA ITSM — 운영 환경 오버라이드
# ============================================================
# 사용법:
#   docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d
# ============================================================

services:

  guardia:
    image: guardia-itsm:${GUARDIA_VERSION:-latest}
    environment:
      DATABASE_URL: ${DATABASE_URL}          # 운영 DB URL 필수
      SECRET_KEY:   ${SECRET_KEY}            # 운영 시크릿 키 필수
    ports:
      - "127.0.0.1:8001:8001"               # localhost만 — Nginx를 통해서만 외부 접근
    volumes:
      - /data/guardia/uploads:/app/uploads  # 호스트 경로 직접 마운트
      - /data/guardia/logs:/app/logs
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        max_attempts: 3
      resources:
        limits:
          cpus: "2.0"
          memory: 2G

  postgres:
    ports: []                               # 운영에서는 외부 노출 금지
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}

  redis:
    ports: []                               # 운영에서는 외부 노출 금지

  ollama:
    ports:
      - "127.0.0.1:11434:11434"            # localhost만 노출
    volumes:
      - ${OLLAMA_MODELS_PATH:-/data/ollama}:/root/.ollama

  tomcat:
    ports:
      - "127.0.0.1:8080:8080"             # localhost만