version: "3.9"

x-common-env: &common-env
  TZ: "UTC"

services:
  kong:
    image: docker.io/library/kong:3.7
    container_name: kong
    restart: unless-stopped
    environment:
      <<: *common-env
      KONG_DATABASE: "off"
      KONG_DECLARATIVE_CONFIG: /config/kong.yml
      KONG_LOG_LEVEL: info
    volumes:
      - ./kong/kong.yml:/config/kong.yml:ro
    ports:
      - "8000:8000"     # proxy
      - "8001:8001"     # admin api
    networks: [internal]

  keycloak:
    image: quay.io/keycloak/keycloak:25.0.0
    container_name: keycloak
    command: start-dev
    restart: unless-stopped
    environment:
      <<: *common-env
      KEYCLOAK_ADMIN: admin
      KEYCLOAK_ADMIN_PASSWORD: admin
      KC_PROXY_HEADERS: xforwarded
    ports:
      - "8080:8080"
    networks: [internal]

  fastapi:
    image: cmmc-fastapi:latest   # built by CI or `make build`
    container_name: fastapi
    restart: unless-stopped
    environment:
      <<: *common-env
      APP_ENV: dev
    ports:
      - "8008:8000"
    networks: [internal]

networks:
  internal:
    driver: bridge