docker-compose.yml

services:
    migrate:
        container_name: helldiversbot-migrate
        platform: linux/amd64
        image: ghcr.io/elfensky/helldiversbot-migrate:staging
        env_file:
            - .env.development
        # Runs migrations and exits

    helldiversbot:
        container_name: helldiversbot
        # this isn't neccesary, the dockerfile entrypoint takes care of that
        # init: true # replaces manually installing and using tini in the docker file.
        restart: unless-stopped
        platform: linux/amd64
        image: ghcr.io/elfensky/helldiversbot:staging
        ports:
            - '127.0.0.1:50001:3000' #security update, from '58102:3000'
        env_file:
            - .env.development
        depends_on:
            migrate:
                condition: service_completed_successfully

        # security
        # security_opt:
        #     - no-new-privileges:true # Prevents privilege escalation
        #     - apparmor:docker-default # Mandatory Access Control
        #     - seccomp=default # System call filtering
        # cap_drop:
        #     - ALL

        # monitoring
        healthcheck:
            test: ['CMD', 'node', '-e', "fetch('http://localhost:3000/api/healthcheck').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
            interval: 60s
            timeout: 10s
            retries: 3
            start_period: 10s