services:
  pfm.api:
    image: pfm-api
    build:
      context: .
      dockerfile: Dockerfile
      network: host
    container_name: pfm-api
    ports:
      - "8075:8080"
    environment:
      - ASPNETCORE_ENVIRONMENT=${ENVIRONMENT:-Development}
      - ForwardedHeadersConfiguration__Enabled=true
      - ForwardedHeadersConfiguration__AllowAll=true
      - ForwardedHeadersConfiguration__ForwardLimit=1
      
      # Postgres Database Overrides      
      - ConnectionStrings__PfmDatabase=Server=${POSTGRES_HOST:-192.168.1.170};Port=${POSTGRES_PORT:-5432};Database=${POSTGRES_DB:-pfm};User Id=${POSTGRES_USER:-pfm-user};Password=${POSTGRES_PASSWORD};
      
      # Garage S3 Settings
      - GeneralS3Settings__ServiceUrl=${GENERAL_S3_SERVICE_URL:-http://192.168.1.177:30900}
      - GeneralS3Settings__Region=${GENERAL_S3_REGION:-garage}
      - GeneralS3Settings__BucketName=${GENERAL_S3_BUCKET_NAME:-pfm.general}
      - GeneralS3Settings__CdnBaseUrl=${GENERAL_S3_CDN_BASE_URL:-https://pfm.general.cdn.khongisa.co.za}
      - GeneralS3Settings__AccessKey=${GENERAL_S3_ACCESS_KEY}
      - GeneralS3Settings__SecretKey=${GENERAL_S3_SECRET_KEY}

      - ContractS3Settings__ServiceUrl=${CONTRACT_S3_SERVICE_URL:-http://192.168.1.177:30900}
      - ContractS3Settings__Region=${CONTRACT_S3_REGION:-garage}
      - ContractS3Settings__BucketName=${CONTRACT_S3_BUCKET_NAME:-pfm.contract}
      - ContractS3Settings__CdnBaseUrl=${CONTRACT_S3_CDN_BASE_URL:-https://pfm.contract.cdn.khongisa.co.za}
      - ContractS3Settings__AccessKey=${CONTRACT_S3_ACCESS_KEY}
      - ContractS3Settings__SecretKey=${CONTRACT_S3_SECRET_KEY}

      - EvidenceS3Settings__ServiceUrl=${EVIDENCE_S3_SERVICE_URL:-http://192.168.1.177:30900}
      - EvidenceS3Settings__Region=${EVIDENCE_S3_REGION:-garage}
      - EvidenceS3Settings__BucketName=${EVIDENCE_S3_BUCKET_NAME:-pfm.evidence}
      - EvidenceS3Settings__CdnBaseUrl=${EVIDENCE_S3_CDN_BASE_URL:-https://pfm.evidence.cdn.khongisa.co.za  }
      - EvidenceS3Settings__AccessKey=${EVIDENCE_S3_ACCESS_KEY}
      - EvidenceS3Settings__SecretKey=${EVIDENCE_S3_SECRET_KEY}
      
      # HashIds overrides
      - HasherSettings__MinHashLength=${HASHER_MIN_HASH_LENGTH:-11}
      - HasherSettings__Salt=${HASHER_SALT}

      # Skoruba Duende Security Overrides
      - SecuritySettings__Authority=${SECURITY_AUTHORITY:-https://sts.security.khongisa.co.za}
      - SecuritySettings__Audience=${SECURITY_AUDIENCE}
      - SecuritySettings__ClientId=${SECURITY_CLIENT_ID}
      - SecuritySettings__ClientSecret=${SECURITY_CLIENT_SECRET}

      # Data Protection Overrides
      - DataProtection__Certificate=${DATA_PROTECTION_CERTIFICATE}
      - DataProtection__Password=${DATA_PROTECTION_CERTIFICATE_PASSWORD}

      # Monitoring Overrides
      - Monitoring__Address=${MONITORING_ADDRESS:-http://aspire-dashboard-service.aspire.svc.cluster.local:18889}
      - Monitoring__ServiceName=${MONITORING_SERVICE_NAME:-Pfm.DEV}
      - Monitoring__ApiKey=${MONITORING_API_KEY}

      # Email Processor Overrides
      - EmailProcessorCron=${EMAIL_PROCESSOR_CRON}
      - Email__Credentials__Password=${EMAIL_CREDENTIALS_PASSWORD}
      - Email__Credentials__Username=${EMAIL_CREDENTIALS_USERNAME}
      - Email__SmtpServer=${EMAIL_SMTP_SERVER}
      - Email__SmtpPort=${EMAIL_SMTP_PORT:-587}
      
      # Redis overrides 
      - ConnectionStrings__Redis=${REDIS_CONNECTION_STRING:-192.168.1.171:6379,ssl=false,abortConnect=false}
  pfm-console:
    build:
      context: .
      dockerfile: PostFundManagement.ConsoleUI/Dockerfile
    container_name: pfm-console
    ports:
      - "8076:3000"
    environment:
      # OIDC Identity Provider Configuration
      - OIDC_AUTHORITY=${OIDC_AUTHORITY:-https://}
      - OIDC_AUDIENCE=${OIDC_AUDIENCE:-aud}
      - OIDC_CLIENT_ID=${OIDC_CLIENT_ID:-clientid}
      - OIDC_CLIENT_SECRET=${OIDC_CLIENT_SECRET:-yoursecret}
      # Backend API Configuration
      - API_BASE_URL=${API_BASE_URL:-https://api.ifri.khongisa.co.za/}
    restart: unless-stopped