docker-compose.dev.yml

# Development overrides for ShadowCheckStatic
# Layer on top of docker-compose.yml for a local hot-reload workflow.

services:
  api:
    build:
      context: .
      dockerfile: Dockerfile
      target: api
    container_name: shadowcheck_web_api_dev
    env_file:
      - path: .env.local
        required: false # optional — falls back to shell env / AWS Secrets Manager
    environment:
      NODE_ENV: development
      PORT: 3001
      API_GATE_ENABLED: "true"
      REDIS_HOST: redis
      DB_HOST: postgres
      DB_PORT: 5432
      DB_USER: ${DB_USER:-shadowcheck_user}
      DB_ADMIN_USER: ${DB_ADMIN_USER:-shadowcheck_admin}
      DB_NAME: ${DB_NAME:-shadowcheck_db}
      DB_PASSWORD: ${DB_PASSWORD:-}
      DB_ADMIN_PASSWORD: ${DB_ADMIN_PASSWORD:-}
      # DB_PASSWORD and DB_ADMIN_PASSWORD still come from AWS Secrets Manager
      # or explicit shell environment overrides.
    volumes:
      - .:/app:cached
      - /app/node_modules
      - ./data:/app/data
      - ./logs:/app/logs
    command: npm run dev # Use nodemon for hot-reload
    healthcheck:
      test: ["CMD-SHELL", "wget -qO- http://127.0.0.1:3001/health >/dev/null 2>&1 || exit 1"]

  redis:
    container_name: shadowcheck_web_redis_dev
    ports:
      - "6380:6379" # Different port for dev to avoid conflicts