local_environment.dockercompose.yaml

services:
  api:
    image: tb.dancedance.api:latest
    container_name: tbdancedanceapi
    build:
      dockerfile: /backend/TB.DanceDance.API/Dockerfile
      context: ./src/
      args:
        BUILD_CONFIGURATION: Debug
    depends_on:
      - azuriteStorage
      - postgresDb
      - authserver
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      - ASPNETCORE_ENVIRONMENT=Development
      - ASPNETCORE_HTTPS_PORTS=8081
      # TO GENERATE CERT ON YOUR MACHINE and share it with docker image:
      # dotnet dev-certs https --clean
      # dotnet dev-certs https -ep $env:USERPROFILE\.aspnet\https\aspnetapp.pfx -p 2918379123298173918273861
      - ASPNETCORE_Kestrel__Certificates__Default__Password=2918379123298173918273861
      - ASPNETCORE_Kestrel__Certificates__Default__Path=/https/aspnetapp.pfx
      - TB:DanceDance:Cors:Origins=http://localhost:3000/
      # Must equal AuthServer:Issuer — embedded in JWT 'iss' claim and OIDC discovery document.
      - Authentication:Authority=https://localhost:7259/
      - Authentication:Audience=tbdancedanceapi
      # Discovery fetched via host.docker.internal — dev cert validation is bypassed in BackchannelHttpHandler.
      - Authentication:MetadataAddress=https://host.docker.internal:7259/.well-known/openid-configuration
      - ConnectionStrings:PostgreDb=Server=host.docker.internal;Port=5432;Userid=postgres;Password=rgFraWIuyxONqWCQ71wh;Database=dancedance
      - ConnectionStrings:Blob=AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==;DefaultEndpointsProtocol=http;BlobEndpoint=http://host.docker.internal:10000/devstoreaccount1;QueueEndpoint=http://host.docker.internal:10001/devstoreaccount1;TableEndpoint=http://host.docker.internal:10002/devstoreaccount1;
    volumes:
      - $USERPROFILE\.aspnet\https\aspnetapp.pfx:/https/aspnetapp.pfx
      - dataProtectionKeys:/home/app/.aspnet/DataProtection-Keys/
      - ./src/backend/TB.DanceDance.API/appsettings.json:/app/appsettings.json
    ports:
      - "7068:8081"
      - "8080:8080"

  authserver:
    image: tb.auth.web:latest
    container_name: tbauthserver
    build:
      dockerfile: authserver/Dockerfile
      context: ./src/
    depends_on:
      - postgresDb
    extra_hosts:
      - "host.docker.internal:host-gateway"
    env_file:
      # Generate this file with: .\tools\generateAuthSigningCert.ps1
      - ./.env.authserver-certs
    environment:
      - ASPNETCORE_ENVIRONMENT=Development
      - ASPNETCORE_HTTPS_PORTS=8081
      - ASPNETCORE_Kestrel__Certificates__Default__Password=2918379123298173918273861
      - ASPNETCORE_Kestrel__Certificates__Default__Path=/https/aspnetapp.pfx
      - ConnectionStrings:AuthDbConnectionString=Server=host.docker.internal;Port=5432;Userid=postgres;Password=rgFraWIuyxONqWCQ71wh;Database=tbauthwebdb
      - AuthServer:Issuer=https://localhost:7259/
      - AuthServer:AllowWeakPasswords=true
      - AuthServer:AllowedCorsOrigins:0=http://localhost:3000
    volumes:
      - $USERPROFILE\.aspnet\https\aspnetapp.pfx:/https/aspnetapp.pfx
      - authServerDataProtectionKeys:/home/app/.aspnet/DataProtection-Keys/
    ports:
      - "7259:8081"   # HTTPS - browser auth redirects
      - "5296:8080"   # HTTP - API discovery (avoids cert validation inside Docker)

  postgresDb:
    image: postgres
    environment:
      - POSTGRES_PASSWORD=rgFraWIuyxONqWCQ71wh
    ports:
      - "5432:5432"
    volumes:
      - postgresDance:/var/lib/postgresql

  azuriteStorage:
    image: mcr.microsoft.com/azure-storage/azurite
    volumes:
      - azuriteStorageDance:/data
    ports:
      - "10000:10000"
      - "10001:10001"
      - "10002:10002"

  # Angular web app (src/my-dance.web). For frontend hot-reload development run
  # the backend without this container and use `npm start` instead:
  #   docker compose -f local_environment.dockercompose.yaml up --scale frontendspa=0
  #   cd src/my-dance.web && npm start      # serves on http://localhost:3000
  frontendspa:
    image: ddwebapp:latest
    container_name: tbdancefrontend
    depends_on:
      - api
    build:
      dockerfile: Dockerfile
      context: src/my-dance.web
    environment:
      # Browser-reachable hosts (host-published ports). redirectUri defaults to
      # window.origin + /callback (http://localhost:3000/callback), which matches
      # the auth server's registered redirect — so it's left unset here.
      - API_BASE_URL=https://localhost:7068
      - AUTH_URL=https://localhost:7259
    ports:
      - "3000:80"

  converter:
    image: ddconverter:latest
    container_name: tbdanceconverter
    depends_on:
      - api
    build:
      dockerfile: TB.DanceDance.Services.Converter.Deamon/Dockerfile
      context: src/backend
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      - DOTNET_ENVIRONMENT=Development
      - tb_dancedance_converter_ConverterConfig__OAuthOrigin=https://host.docker.internal:7259/
      - tb_dancedance_converter_ConverterConfig__ApiOrigin=https://host.docker.internal:7068/
      - tb_dancedance_converter_ConverterConfig__TokenProviderOptions__ClientSecret=Other
      - tb_dancedance_converter_ConverterConfig__TokenProviderOptions__ClientId=tbdancedanceconverter
      - tb_dancedance_converter_ConverterConfig__TokenProviderOptions__Scope=tbdancedanceapi.convert
      - tb_dancedance_converter_ConverterConfig__DelayInMinutes=1
      # API SAS URLs embed 127.0.0.1 (Azurite's host-published port, fine for the browser),
      # but 127.0.0.1 is unreachable from inside Docker. Remap to the internal service name.
      - tb_dancedance_converter_ConverterConfig__BlobEndpointOverride=http://azuriteStorage:10000

  initializator:
    image: initializator:latest
    container_name: tbdanceInitializer
    build:
      dockerfile: local_environment.initializator.dockerfile
      context: .
    extra_hosts:
      - "host.docker.internal:host-gateway"
    environment:
      - BlobStorageHostName=host.docker.internal
      - DB_HOST=host.docker.internal
      - DB_NAME=dancedance
      - AUTH_DBNAME=tbauthwebdb
    depends_on:
      - postgresDb
      - azuriteStorage

volumes:
  postgresDance:
  azuriteStorageDance:
  dataProtectionKeys:
  authServerDataProtectionKeys: