docker-compose.yml

services:

  nginx:
    environment:
      - FULLCHAIN_FILE=/run/secrets/server_cert
      - PRIVKEY_FILE=/run/secrets/server_key
    secrets:
      - server_cert
      - server_key
    build:
      context: .
      dockerfile: requirements/nginx/Dockerfile
    container_name: nginx
    depends_on: 
      - api-gateway
    ports:
      - "4443:443"
    volumes:
      - ./requirements/nginx/nginx.conf:/etc/nginx/nginx.conf
      - ./requirements/nginx/conf.d:/etc/nginx/conf.d
      - pong:/var/www/html/pong
    restart: always

  api-gateway:
    container_name: api-gateway
    secrets:
      - api_cert
      - api_key
    build: requirements/api-gateway
    depends_on:
      - auth-service
      - 2fa-service
    environment:
      - AUTH_SERVICE_PORT=${AUTH_PORT:-3001}
      - TWOFA_SERVICE_PORT=${TWOFA_PORT:-3003}

  auth-service:
    container_name: auth-service
    build: requirements/auth-service
    secrets:
      - secret_key
      - cookie_secret
      - jwt_secret
    volumes:
      - pong_db:/app/database #share db file 
    environment:
      - PORT=${AUTH_PORT:-3001}
      - CORS_ORIGINS=http://localhost:4443
      - SECRET_KEY_FILE=/run/secrets/secret_key
      - SESSION_LIFETIME=86400
      - COOKIE_SECRET=/run/secrets/cookie_secret
      - JWT_SECRET=/run/secrets/jwt_secret
  2fa-service:
    container_name: 2fa-service
    build: requirements/2fa-service
    secrets:
      - email_user
      - email_password
      - cookie_secret
      - jwt_secret
    environment:
      - NODE_ENV=production
      - PORT=${TWOFA_PORT:-3003}
      - CORS_ORIGINS=http://localhost:4443
      - TOKEN_EXPIRY=300
      - EMAIL_SERVICE=gmail
      - APP_NAME="Transcendence Pong"
      - EMAIL_USER_FILE=/run/secrets/email_user
      - EMAIL_PASSWORD_FILE=/run/secrets/email_password
      - COOKIE_SECRET=/run/secrets/cookie_secret
      - JWT_SECRET=/run/secrets/jwt_secret
      - SHOW_2FA=true
    restart: unless-stopped
    volumes:
      - 2fa_data:/usr/src/app/data
  

  elasticsearch:
    image: docker.elastic.co/elasticsearch/elasticsearch:${ELASTIC_VERSION}
    container_name: es01
    environment:
      - node.name=es01
      - discovery.type=single-node
      - xpack.security.enabled=true
      # Para dev local: HTTPS desactivado (actívalo en prod)
      - xpack.security.http.ssl.enabled=false
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - ES_JAVA_OPTS=${ES_JAVA_OPTS}
      - KIBANA_PASSWORD=${KIBANA_SYSTEM_PASSWORD}
      - xpack.security.autoconfiguration.enabled=true
    ulimits:
      memlock:
        soft: -1
        hard: -1
    ports:
      - "127.0.0.1:9200:9200"
    volumes:
      - esdata:/usr/share/elasticsearch/data
    healthcheck:
      test: ["CMD-SHELL", "curl -s -u elastic:${ELASTIC_PASSWORD}
              http://localhost:9200 >/dev/null || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 40
  logstash:
    image: docker.elastic.co/logstash/logstash:${ELASTIC_VERSION}
    container_name: ls01
    environment:
      - LS_JAVA_OPTS=${LS_JAVA_OPTS}
      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
      - ELASTICSEARCH_USERNAME=elastic
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - XPACK_MONITORING_ENABLED=false
      - XPACK_MONITORING_ELASTICSEARCH_USERNAME=elastic
      - XPACK_MONITORING_ELASTICSEARCH_PASSWORD=${ELASTIC_PASSWORD}
      - http.host=0.0.0.0
    volumes:
      - ./requirements/logstash/pipeline:/usr/share/logstash/pipeline
      - ./requirements/logstash/config:/usr/share/logstash/config
    ports:
      - "127.0.0.1:5050:5050"
      - "127.0.0.1:5051:5051"
      - "127.0.0.1:5044:5044"
    depends_on:
      - elasticsearch
  kibana:
    image: docker.elastic.co/kibana/kibana:${ELASTIC_VERSION}
    container_name: kib01
    environment:
      - ELASTICSEARCH_HOSTS=http://elasticsearch:9200
      - ELASTICSEARCH_USERNAME=kibana_system
      - ELASTICSEARCH_PASSWORD=${KIBANA_SYSTEM_PASSWORD}
      - ELASTICSEARCH_REQUEST_TIMEOUT=120000

    ports:
      - "127.0.0.1:5601:5601"
    depends_on:
      - elasticsearch

  configure-kibana:
    build: 
      context: requirements/configure-kibana
      dockerfile: Dockerfile
    container_name: configure-kibana
    depends_on:
      elasticsearch:
          condition: service_healthy
    environment:
      - ELASTIC_PASSWORD=${ELASTIC_PASSWORD}
      - KIBANA_SYSTEM_PASSWORD=${KIBANA_SYSTEM_PASSWORD}
    restart: "no"
    
networks:
  default:
    name: transcendence-network
    driver: bridge

volumes:
  pong:
    driver: local
    driver_opts:
      type: none
      device: ${PWD}/data/pong
      o: bind
  pong_db:
    driver: local
    driver_opts:
      type: none
      device: ${PWD}/data/DB
      o: bind
  2fa_data:
    driver: local
  esdata:
    driver: local

secrets:
  server_cert:
    file: ./secrets/cert.pem
  server_key:
    file: ./secrets/key.pem
  api_cert:
    file: ./secrets/apicert.pem
  api_key:
    file: ./secrets/apikey.pem
  email_user:
    file: ./secrets/email_user.txt
  email_password:
    file: ./secrets/email_password.txt
  secret_key:
    file: ./secrets/secret_key.txt
  cookie_secret:
    file: ./secrets/cookie_secret.txt  
  jwt_secret:
    file: ./secrets/jwt_secret.txt