# Staging environment — runs alongside production on the same VM.
# Completely independent: own database, own app container, different ports.
#
# Usage:
#   docker compose -f docker-compose.staging.yml -p esports-staging up -d --build
#
# Prerequisites (one-time server setup):
#   1. DNS: A record for staging.esports.vash.software → VM IP
#   2. SSL: sudo certbot certonly --nginx -d staging.esports.vash.software
#   3. nginx: reverse proxy staging.esports.vash.software → 127.0.0.1:3002
#   4. osu! OAuth: register a separate app at https://osu.ppy.sh/home/account/edit
#      with callback URL: https://staging.esports.vash.software/api/auth/oauth2/callback/osu
#   5. osu! IRC: get a separate IRC password from https://osu.ppy.sh/p/irc
#   6. Copy .env.staging.example → .env.staging and fill in values

services:
  staging-db:
    image: postgres:17
    container_name: esports-staging-db
    restart: unless-stopped
    environment:
      POSTGRES_DB: vash_staging
      POSTGRES_USER: vash_staging
      POSTGRES_PASSWORD: ${STAGING_DB_PASSWORD}
    env_file:
      - .env.staging
    volumes:
      - pgdata-staging:/var/lib/postgresql/data
    ports:
      - '127.0.0.1:5433:5432'
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U vash_staging -d vash_staging']
      interval: 2s
      timeout: 3s
      retries: 10
      start_period: 2s

  staging-app:
    build: .
    container_name: esports-staging-app
    restart: unless-stopped
    stop_grace_period: 2s
    depends_on:
      staging-db:
        condition: service_healthy
    ports:
      - '127.0.0.1:3002:3000'
    environment:
      DATABASE_URL: postgresql://vash_staging:${STAGING_DB_PASSWORD}@staging-db:5432/vash_staging
      ORIGIN: https://esports-staging.vash.software
      BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
      OSU_CLIENT_ID: ${OSU_CLIENT_ID}
      OSU_CLIENT_SECRET: ${OSU_CLIENT_SECRET}
      OSU_IRC_USERNAME: ${OSU_IRC_USERNAME}
      OSU_IRC_PASSWORD: ${OSU_IRC_PASSWORD}
      DISCORD_BOT_TOKEN: ${DISCORD_BOT_TOKEN}
      DISCORD_MATCH_CHANNEL_ID: ${DISCORD_MATCH_CHANNEL_ID}
      R2_ACCOUNT_ID: ${R2_ACCOUNT_ID}
      R2_ACCESS_KEY_ID: ${R2_ACCESS_KEY_ID}
      R2_SECRET_ACCESS_KEY: ${R2_SECRET_ACCESS_KEY}
      R2_BUCKET: ${R2_BUCKET:-vash-esports-images}
      R2_PUBLIC_URL: ${R2_PUBLIC_URL:-https://cdn.esports.vash.software}
      ROOT_ADMIN_EMAIL: ${ROOT_ADMIN_EMAIL}
      PUBLIC_SENTRY_DSN: ${PUBLIC_SENTRY_DSN}
      NODE_ENV: production
    env_file:
      - .env.staging
    healthcheck:
      test:
        [
          'CMD',
          'bun',
          '-e',
          "fetch('http://localhost:3000/api/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"
        ]
      interval: 5s
      timeout: 3s
      retries: 3
      start_period: 10s

volumes:
  pgdata-staging: