version: "3.5"

services:
  server:
    build: ./server
    networks:
     - web
     - internal
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres-password
      POSTGRES_USER: kalkulog
      POSTGRES_DB: kalkulog
      POSTGRES_HOST: database
    secrets: [ postgres-password ]
    depends_on: [ database ]
    ports:
      # TODO remove in prod
      - 8000:8000
  database:
    image: postgres
    environment:
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres-password
      POSTGRES_USER: kalkulog
      POSTGRES_DB: kalkulog
    secrets: [ postgres-password ]
    networks: [ internal ]
    volumes:
      - ./db.mount:/var/lib/postgresql/data

secrets:
  postgres-password:
    file: ./server/postgres.pw

networks:
  internal:
    internal: true
  web:
    external: true