docker-compose.yml

services:
  caddy:
    image: caddy:2.8-alpine
    container_name: ${CADDY_CONTAINER_NAME:-cicd-caddy}
    restart: unless-stopped
    depends_on:
      dashboard-api:
        condition: service_started
      gitea:
        condition: service_healthy
      teamcity-server:
        condition: service_started
      nexus:
        condition: service_started
      build-cache:
        condition: service_started
    ports:
      - "${HTTP_PORT:-80}:80"
      - "${HTTPS_PORT:-443}:443"
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - ./dashboard-web:/srv/dashboard-web:ro
      - ./data/caddy/data:/data
      - ./data/caddy/config:/config

  dashboard-api:
    build:
      context: ./dashboard-api
    container_name: ${DASHBOARD_API_CONTAINER_NAME:-dashboard-api}
    restart: unless-stopped
    environment:
      DASHBOARD_DOMAIN: ${DASHBOARD_DOMAIN:-localhost}
      GITEA_DOMAIN: ${GITEA_DOMAIN:-gitea.localhost}
      TEAMCITY_DOMAIN: ${TEAMCITY_DOMAIN:-teamcity.localhost}
      NEXUS_DOMAIN: ${NEXUS_DOMAIN:-nexus.localhost}
      BUILD_CACHE_DOMAIN: ${BUILD_CACHE_DOMAIN:-build-cache.localhost}
      FOUNDRY_ENVIRONMENT: ${FOUNDRY_ENVIRONMENT:-local}
      FOUNDRY_VERSION: ${FOUNDRY_VERSION:-dev}
      GITEA_CONTAINER_NAME: ${GITEA_CONTAINER_NAME:-gitea}
      TEAMCITY_SERVER_CONTAINER_NAME: ${TEAMCITY_SERVER_CONTAINER_NAME:-teamcity-server}
      NEXUS_CONTAINER_NAME: ${NEXUS_CONTAINER_NAME:-nexus}
      BUILD_CACHE_CONTAINER_NAME: ${BUILD_CACHE_CONTAINER_NAME:-build-cache}
      POSTGRES_CONTAINER_NAME: ${POSTGRES_CONTAINER_NAME:-cicd-postgres}
      POSTGRES_ADMIN_USER: ${POSTGRES_ADMIN_USER:-postgres}
      GITEA_DB_NAME: ${GITEA_DB_NAME:-gitea}
      TEAMCITY_DB_NAME: ${TEAMCITY_DB_NAME:-teamcity}
      BACKUPS_DIR: /backups
      BACKUP_STALE_HOURS: ${BACKUP_STALE_HOURS:-24}
      BACKUP_SCHEDULE_ENABLED: ${BACKUP_SCHEDULE_ENABLED:-true}
      BACKUP_CRON: "${BACKUP_CRON:-0 0 2 * * *}"
      BACKUP_WORKDIR: /workspace
      BACKUP_OUTPUT_DIR: /workspace/backups
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./:/workspace
      - ./backups:/backups
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://localhost:8080/actuator/health"]
      interval: 20s
      timeout: 5s
      retries: 10

  postgres:
    image: postgres:16-alpine
    container_name: ${POSTGRES_CONTAINER_NAME:-cicd-postgres}
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${POSTGRES_ADMIN_USER:-postgres}
      POSTGRES_PASSWORD: ${POSTGRES_ADMIN_PASSWORD:-postgres_admin_password}
      POSTGRES_DB: ${POSTGRES_ADMIN_DB:-postgres}
    ports:
      - "${POSTGRES_PORT:-5432}:5432"
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
      - ./postgres/init:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_ADMIN_USER:-postgres} -d ${POSTGRES_ADMIN_DB:-postgres}"]
      interval: 10s
      timeout: 5s
      retries: 10

  gitea:
    image: gitea/gitea:1.25.4
    container_name: ${GITEA_CONTAINER_NAME:-gitea}
    restart: unless-stopped
    environment:
      USER_UID: ${PUID:-1000}
      USER_GID: ${PGID:-1000}
      GITEA__server__ROOT_URL: ${GITEA_ROOT_URL:-https://gitea.localhost/}
      GITEA__server__PROTOCOL: http
      GITEA__server__DOMAIN: ${GITEA_DOMAIN:-gitea.localhost}
      GITEA__server__HTTP_PORT: 3000
      GITEA__database__DB_TYPE: postgres
      GITEA__database__HOST: postgres:5432
      GITEA__database__NAME: ${GITEA_DB_NAME:-gitea}
      GITEA__database__USER: ${GITEA_DB_USER:-gitea}
      GITEA__database__PASSWD: ${GITEA_DB_PASSWORD:-gitea_password}
      GITEA__database__SSL_MODE: disable
      GITEA__security__INSTALL_LOCK: true
      GITEA__service__DISABLE_REGISTRATION: false
    depends_on:
      postgres:
        condition: service_healthy
    ports:
      - "${GITEA_SSH_PORT:-2222}:22"
    volumes:
      - ./data/gitea:/data
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "/dev/null", "http://localhost:3000/"]
      interval: 20s
      timeout: 10s
      retries: 10

  teamcity-server:
    image: jetbrains/teamcity-server:2025.11.3
    container_name: ${TEAMCITY_SERVER_CONTAINER_NAME:-teamcity-server}
    restart: unless-stopped
    depends_on:
      postgres:
        condition: service_healthy
      gitea:
        condition: service_healthy
    ports:
      - "${TEAMCITY_HTTP_PORT:-8111}:8111"
    volumes:
      - ./data/teamcity/server/data:/data/teamcity_server/datadir
      - ./data/teamcity/server/logs:/opt/teamcity/logs
    healthcheck:
      test: ["CMD", "bash", "-lc", "exec 3<>/dev/tcp/127.0.0.1/8111"]
      interval: 20s
      timeout: 10s
      retries: 15

  teamcity-agent:
    image: jetbrains/teamcity-agent:2025.11.3
    container_name: ${TEAMCITY_AGENT_CONTAINER_NAME:-teamcity-agent-1}
    restart: unless-stopped
    depends_on:
      teamcity-server:
        condition: service_started
    environment:
      SERVER_URL: http://teamcity-server:8111
      AGENT_NAME: ${TEAMCITY_AGENT_NAME:-teamcity-agent-1}
      DOCKER_IN_DOCKER: start
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data/teamcity/agent/conf:/data/teamcity_agent/conf
      - ./data/teamcity/agent/work:/opt/buildagent/work
      - ./data/teamcity/agent/temp:/opt/buildagent/temp
      - ./data/teamcity/agent/system:/opt/buildagent/system

  nexus:
    image: sonatype/nexus3:3.87.2-alpine
    container_name: ${NEXUS_CONTAINER_NAME:-nexus}
    restart: unless-stopped
    ports:
      - "${NEXUS_HTTP_PORT:-8081}:8081"
    volumes:
      - ./data/nexus:/nexus-data

  build-cache:
    image: ghcr.io/helixframework/build-cache:latest
    platform: linux/amd64
    container_name: ${BUILD_CACHE_CONTAINER_NAME:-build-cache}
    restart: unless-stopped
    environment:
      GRADLE_CACHE_STORAGE_DIR: ${GRADLE_CACHE_STORAGE_DIR:-/data/cache}
    ports:
      - "${BUILD_CACHE_PORT:-5071}:5071"
    volumes:
      - ./cache-data:/data/cache

networks:
  default:
    name: ${STACK_NETWORK_NAME:-selfhosted-cicd-net}