# Nexus 6.0 — production Compose (1Panel / bare Docker host)
# Tuned for 2 vCPU / 8 GiB — see docker/mysql-prod-2c8g.cnf
#
# Usage:
#   cp docker/.env.prod.example docker/.env.prod   # fill secrets from Baota .env
#   docker compose -f docker/docker-compose.prod.yml --env-file docker/.env.prod up -d --build
#
# OpenResty on host proxies https://api.synaglobal.vip → 127.0.0.1:8600

name: nexus-prod

services:
  mysql:
    image: mysql:8.4
    restart: unless-stopped
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:?set MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: nexus
      MYSQL_USER: nexus
      MYSQL_PASSWORD: ${MYSQL_PASSWORD:?set MYSQL_PASSWORD}
    volumes:
      - mysql-data:/var/lib/mysql
      - ./mysql-prod-2c8g.cnf:/etc/mysql/conf.d/99-nexus-2c8g.cnf:ro
    mem_limit: 2g
    cpus: 1.5
    healthcheck:
      test: ["CMD-SHELL", "mysqladmin ping -h 127.0.0.1 -uroot -p\"$$MYSQL_ROOT_PASSWORD\" || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 8
      start_period: 40s
    networks:
      - nexus-internal

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    command:
      - redis-server
      - --appendonly
      - "yes"
      - --maxmemory
      - 256mb
      - --maxmemory-policy
      - allkeys-lru
    volumes:
      - redis-data:/data
    mem_limit: 384m
    cpus: 0.5
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 8
    networks:
      - nexus-internal

  nexus:
    build:
      context: ..
      dockerfile: Dockerfile.prod
    restart: unless-stopped
    depends_on:
      mysql:
        condition: service_healthy
      redis:
        condition: service_healthy
    ports:
      - "127.0.0.1:${NEXUS_PUBLISH_PORT:-8600}:8600"
    environment:
      MYSQL_HOST: mysql
      MYSQL_PORT: "3306"
      REDIS_HOST: redis
      REDIS_PORT: "6379"
      NEXUS_PERSIST_DIR: /var/lib/nexus
      NEXUS_DOCKER_WRITE_ENV: "1"
      NEXUS_HOST: "0.0.0.0"
      NEXUS_PORT: "8600"
      NEXUS_DEPLOY_PATH: /app
      NEXUS_DATABASE_URL: mysql+aiomysql://nexus:${MYSQL_PASSWORD}@mysql:3306/nexus
      NEXUS_REDIS_URL: redis://redis:6379/0
      NEXUS_CORS_ORIGINS: ${NEXUS_CORS_ORIGINS:?set NEXUS_CORS_ORIGINS}
      NEXUS_SECRET_KEY: ${NEXUS_SECRET_KEY:?set NEXUS_SECRET_KEY}
      NEXUS_API_KEY: ${NEXUS_API_KEY:?set NEXUS_API_KEY}
      NEXUS_ENCRYPTION_KEY: ${NEXUS_ENCRYPTION_KEY:-}
      NEXUS_API_BASE_URL: ${NEXUS_API_BASE_URL:?set NEXUS_API_BASE_URL}
      NEXUS_DB_POOL_SIZE: ${NEXUS_DB_POOL_SIZE:-30}
      NEXUS_DB_MAX_OVERFLOW: ${NEXUS_DB_MAX_OVERFLOW:-20}
    volumes:
      - nexus-state:/var/lib/nexus
      - nexus-web-data:/app/web/data
    mem_limit: 2g
    cpus: 1.5
    healthcheck:
      test: ["CMD", "curl", "-sf", "http://127.0.0.1:8600/health"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 90s
    networks:
      - nexus-internal

networks:
  nexus-internal:
    driver: bridge

volumes:
  mysql-data:
  redis-data:
  nexus-state:
  nexus-web-data: