services:
  db:
    image: postgres:16-alpine
    restart: unless-stopped
    environment:
      POSTGRES_USER: league
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_DB: league
    volumes: [pgdata:/var/lib/postgresql/data]
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U league"]
      interval: 5s
      retries: 10
  web:
    build: .
    restart: unless-stopped
    depends_on:
      db: {condition: service_healthy}
    environment:
      DATABASE_URL: postgres://league:${DB_PASSWORD}@db:5432/league
      ADMIN_PASSWORD: ${ADMIN_PASSWORD}
      SECRET_KEY: ${SECRET_KEY}
      COOKIE_SECURE: ${COOKIE_SECURE:-false}
    ports: ["${BIND_ADDR:-127.0.0.1}:8000:8000"]   # set BIND_ADDR to this host's Tailscale IP; never 0.0.0.0
volumes:
  pgdata: