docker-compose.yml

services:
  postgres:
    image: postgres:15
    container_name: postgres
    restart: always
    environment:
      POSTGRES_USER: uverify
      POSTGRES_PASSWORD: ${DB_PASSWORD:-your_uverify_db_password}
      POSTGRES_DB: uverify
    volumes:
      - postgres_data:/var/lib/postgresql/data
    ports:
      - "5432:5432"

  uverify-backend:
    image: uverify/uverify-backend:latest
    container_name: uverify-backend
    restart: always
    environment:
      PORT: 9090

      # Values are read from a .env file next to this compose file.
      # Copy .env.example from the uverify-backend repo and adjust it,
      # or export the variables in your shell before `docker compose up`.
      SPRING_ACTIVE_PROFILES: ${SPRING_ACTIVE_PROFILES:-postgres,preprod}
      DB_URL: jdbc:postgresql://postgres:5432/uverify
      DB_USERNAME: uverify
      DB_PASSWORD: ${DB_PASSWORD:-your_uverify_db_password}

      CARDANO_NETWORK: ${CARDANO_NETWORK:-PREPROD}
      BLOCKFROST_PROJECT_ID: ${BLOCKFROST_PROJECT_ID:?Set BLOCKFROST_PROJECT_ID in .env (see https://blockfrost.io)}
      BLOCKFROST_BASE_URL: ${BLOCKFROST_BASE_URL:-https://cardano-preprod.blockfrost.io/api/v0/}

      # REMOTE_NODE_URL / REMOTE_NODE_PORT: N2N connection for the embedded chain
      # indexer. Defaults target a public preprod relay — override when running
      # against mainnet.
      # REMOTE_NODE_URL: backbone.cardano.iog.io
      # REMOTE_NODE_PORT: 3001

      # Extensions (all disabled by default)
      CONNECTED_GOODS_EXTENSION_ENABLED: "false"
      TADAMON_EXTENSION_ENABLED: "false"
      # TOKENIZABLE_CERTIFICATE_EXTENSION_ENABLED: "true"
      # FRACTIONIZED_CERTIFICATE_EXTENSION_ENABLED: "true"

      # Identity verification (KERI/ACDC): point at a vLEI Verifier to have
      # IdentityAuth credentials indexed with keriVerified=true.
      # VLEI_VERIFIER_URL: https://your-vlei-verifier.example.com

      # SERVICE_USER_ADDRESS: Override only if using a custom service address.
      #   The network default is baked into application.yml per profile.

      # FACILITATOR_ACCOUNT_MNEMONIC: Add your *optional* facilitator mnemonic here
      # The facilitator is used to sign rest requests, ensuring that the request is coming from a trusted source.
      # This account is not used for any other purpose and will be generated by the backend if not provided.
    depends_on:
      - postgres
    ports:
      - "9090:9090"
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: '2'

  uverify-ui:
    image: uverify/uverify-ui:latest
    container_name: uverify-ui
    restart: always
    environment:
      # Must be reachable from the user's browser (not the docker-internal
      # hostname). Replace with your public API URL when deploying.
      VITE_BACKEND_URL: ${VITE_BACKEND_URL:-http://localhost:9090}
      VITE_CARDANO_NETWORK: ${VITE_CARDANO_NETWORK:-preprod}
    depends_on:
      - uverify-backend
    ports:
      - "3000:80"

  # nginx:
  #   image: nginx:latest
  #   container_name: nginx
  #   restart: always
  #   volumes:
  #     - ./nginx.conf:/etc/nginx/nginx.conf
  #     - ./certs:/etc/letsencrypt
  #   ports:
  #     - "443:443"
  #   depends_on:
  #     - uverify-ui

volumes:
  postgres_data: