networks:
  edge_net:
    name: ${EDGE_NET}
    external: true
  db_net:
    name: ${DB_NET}
    external: true

volumes:
  db-data:
    name: ${DB_VOLUME}
    external: true

secrets:
  DB_PASSWORD:
    file: '/srv/secrets/DB_PASSWORD'

services:
  db:
    image: postgres:16
    restart: unless-stopped
    secrets: ['DB_USER', 'DB_PASSWORD']
    environment:
      POSTGRES_USER_FILE: '/run/secrets/DB_USER'
      POSTGRES_PASSWORD_FILE: /run/secrets/DB_PASSWORD
    env_file:
      - ${SECRETS}/env/db.env
    user: '${UID}:${GID}'
    volumes:
      - db-data:/var/lib/postgresql/data
    networks:
      - db_net
    expose:
      - 5432
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER}"]
      interval: 5s
      retries: 5
  dba:
    container_name: ${DBA_CONTAINER}
    image: adminer:latest
    environment:
      ADMINER_DEFAULT_SERVER: db
      ADMINER_DESIGN: galkaev
    env_file:
      - .run.env
      - .env
    depends_on:
      - db
    networks:
      - edge_net
      - db_net
    expose:
      - 8080