# DIDI Domain Check (T4) — modul dedicat platformei DIDI.
# Izolare: Postgres + Redis proprii pe rețeaua internă `domain_check_network`.
# Integrare: API-ul se atașează și la `didi-network` (externă, partajată cu
# restul platformei) sub aliasul `domain-check-api`, ca agent-v3 (Lot 2) să-l
# apeleze la `http://domain-check-api:11000/api/v1/check/check` fără alt config.
networks:
  domain_check_network:
    driver: bridge
    name: domain_check_network
  didi-network:
    external: true
volumes:
  domain_check_postgres_data:
    name: domain_check_postgres_data
  domain_check_redis_data:
    name: domain_check_redis_data
  domain_check_api_logs:
    name: domain_check_api_logs
services:
  domain_check_postgres:
    image: postgres:15-alpine
    container_name: didiAI-domain-check-db
    networks:
    - domain_check_network
    environment:
      POSTGRES_DB: ${DB_NAME}
      POSTGRES_USER: ${DB_USER}
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      PGDATA: /var/lib/postgresql/data/pgdata
    volumes:
    - domain_check_postgres_data:/var/lib/postgresql/data
    - ./init-scripts:/docker-entrypoint-initdb.d:ro
    healthcheck:
      test:
      - CMD-SHELL
      - pg_isready -U ${DB_USER} -d ${DB_NAME}
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 10s
    restart: unless-stopped
  domain_check_redis:
    image: redis:7-alpine
    container_name: didiAI-domain-check-redis
    networks:
    - domain_check_network
    command: 'redis-server --appendonly yes --maxmemory 512mb --maxmemory-policy allkeys-lru
      --save 900 1 --save 300 10 --save 60 10000

      '
    volumes:
    - domain_check_redis_data:/data
    healthcheck:
      test:
      - CMD
      - redis-cli
      - ping
      interval: 10s
      timeout: 3s
      retries: 5
      start_period: 5s
    restart: unless-stopped
  domain_check_api:
    build:
      context: ./api
      dockerfile: Dockerfile
    image: ${REGISTRY_IMAGE:-didiai-domain-check}:${IMAGE_TAG:-latest}
    container_name: didiAI-domain-check
    networks:
      domain_check_network: {}
      didi-network:
        aliases:
        - domain-check-api
    dns:
    - 8.8.8.8
    - 8.8.4.4
    - 1.1.1.1
    environment:
    - DATABASE_URL=postgresql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME}
    - REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}/${REDIS_DB}
    - WHOXY_API_KEY=${WHOXY_API_KEY}
    - VIRUSTOTAL_API_KEY=${VIRUSTOTAL_API_KEY}
    - FLASK_ENV=${FLASK_ENV}
    - FLASK_APP=${FLASK_APP}
    - SECRET_KEY=${SECRET_KEY}
    - LOG_LEVEL=${LOG_LEVEL}
    - DEBUG=${DEBUG}
    - REDIS_TTL_HOT=${REDIS_TTL_HOT}
    - REDIS_TTL_WARM=${REDIS_TTL_WARM}
    - REDIS_TTL_COLD=${REDIS_TTL_COLD}
    - API_HOST=${API_HOST}
    - API_PORT=${API_PORT}
    - API_VERSION=${API_VERSION}
    volumes:
    - domain_check_api_logs:/app/logs
    depends_on:
      domain_check_postgres:
        condition: service_healthy
      domain_check_redis:
        condition: service_healthy
    healthcheck:
      test:
      - CMD
      - curl
      - -f
      - http://localhost:${API_PORT}/health
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 40s
    restart: unless-stopped
    command: gunicorn --workers 2 --worker-class gthread --threads 4 --timeout 120
      --graceful-timeout 30 --access-logfile - --error-logfile - --bind 0.0.0.0:${API_PORT}
      run:app
  domain_check_worker:
    build:
      context: ./api
      dockerfile: Dockerfile
    image: ${REGISTRY_IMAGE:-didiai-domain-check}:${IMAGE_TAG:-latest}
    container_name: didiAI-domain-check-worker
    networks:
    - domain_check_network
    dns:
    - 8.8.8.8
    - 8.8.4.4
    - 1.1.1.1
    command: celery -A app.celery_app worker --loglevel=info --concurrency=4
    environment:
    - DATABASE_URL=postgresql://${DB_USER}:${DB_PASSWORD}@${DB_HOST}:${DB_PORT}/${DB_NAME}
    - REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}/${REDIS_DB}
    - CELERY_BROKER_URL=${CELERY_BROKER_URL}
    - CELERY_RESULT_BACKEND=${CELERY_RESULT_BACKEND}
    - WHOXY_API_KEY=${WHOXY_API_KEY}
    - VIRUSTOTAL_API_KEY=${VIRUSTOTAL_API_KEY}
    - LOG_LEVEL=${LOG_LEVEL}
    depends_on:
    - domain_check_api
    - domain_check_redis
    healthcheck:
      test:
      - CMD
      - celery
      - -A
      - app.celery_app
      - inspect
      - ping
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s
    restart: unless-stopped