services:
  db:
    image: timescale/timescaledb-ha:pg16-all
    environment:
      POSTGRES_DB: aprs
      POSTGRES_USER: aprs
      POSTGRES_PASSWORD: ${DB_PASSWORD:-aprs}
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U aprs -d aprs"]
      interval: 10s
      timeout: 5s
      retries: 10

  collector:
    build: ./collector
    ports:
      - "8085:8080"   # expose API ??? put Caddy/nginx in front for TLS
    environment:
      DATABASE_URL: postgresql://aprs:${DB_PASSWORD:-aprs}@db:5432/aprs
      API_KEY: ${API_KEY}                           # shared secret with forwarder
      STATION_CALL: ${STATION_CALL:-SA6ANW-1}
      APRS_IS_CALLSIGN: ${STATION_CALL:-SA6ANW-1}
      APRS_IS_PASSCODE: ${APRS_IS_PASSCODE:--1}
      APRS_IS_FILTER: ${APRS_IS_FILTER:-r/58.35/14.05/200}
      LOG_LEVEL: ${LOG_LEVEL:-INFO}
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy

  web:
    image: nginx:alpine
    ports:
      - "8084:80"
    volumes:
      - ./web/index.html:/usr/share/nginx/html/index.html:ro
      - ./web/nginx.conf:/etc/nginx/conf.d/default.conf:ro
    restart: unless-stopped