docker-compose.yml

services:
  frontend:
    build: .
    command: ["python", "-m", "pspcz_analyzer.main_frontend"]
    ports:
      - "${PORT:-8000}:${PORT:-8000}"
    volumes:
      - ${PSPCZ_CACHE_HOST_DIR:-./cache-data}:/data/cache:z
    env_file:
      - .env
    environment:
      PSPCZ_CACHE_DIR: /data/cache
      PSPCZ_DEV: "0"
      PORT: "${PORT:-8000}"
    restart: unless-stopped
    depends_on:
      - backend
    healthcheck:
      test: ["CMD-SHELL", "python -c \"import os,urllib.request;urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('PORT','8000')+'/api/health', timeout=5)\""]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 300s # cold cache: lifespan downloads psp.cz data first

  backend:
    build: .
    command: ["python", "-m", "pspcz_analyzer.main_backend"]
    # Loopback-only by default: the admin panel is not meant to be public.
    # Behind a reverse proxy or for LAN access, set ADMIN_BIND_ADDR (e.g. 0.0.0.0)
    # and lock admin access down with ADMIN_ALLOWED_IPS / ADMIN_TRUSTED_PROXIES.
    ports:
      - "${ADMIN_BIND_ADDR:-127.0.0.1}:${ADMIN_PORT:-8001}:${ADMIN_PORT:-8001}"
    volumes:
      - ${PSPCZ_CACHE_HOST_DIR:-./cache-data}:/data/cache:z
    env_file:
      - .env
    environment:
      PSPCZ_CACHE_DIR: /data/cache
      PSPCZ_DEV: "0"
      ADMIN_PORT: "${ADMIN_PORT:-8001}"
    extra_hosts:
      - "host.docker.internal:host-gateway"
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "python -c \"import os,urllib.request;urllib.request.urlopen('http://127.0.0.1:'+os.environ.get('ADMIN_PORT','8001')+'/admin/api/health', timeout=5)\""]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 300s