# CraftDock — Bedrock stack, from the published image (no local build).
# Usage: docker compose -f docker-compose.bedrock.registry.yaml up -d
# Same stack as docker-compose.bedrock.yaml, but the panel is pulled from the Gitea
# registry (built and tested by CI) instead of being built on the host.
# Secrets/overrides (${...}) are read from the project .env by docker compose.
# See the "Environment variables" table in README.md for every variable.
services:
  craftdock-panel:
    image: git.lucasrguerra.dev.br/lucasrguerra/craftdock:${IMAGE_TAG:-latest}
    pull_policy: always
    container_name: craftdock-panel
    # Behind a reverse proxy (Coolify/Traefik) the panel is reached over the
    # internal Docker network, so only EXPOSE the port — do NOT publish it on the
    # host. In Coolify, set the service domain WITHOUT a port
    # (https://your.domain, not https://your.domain:3000) and make sure the
    # service's target port is 3000 — otherwise Traefik forwards to the wrong
    # port and plain 443 returns "no available server".
    #
    # For LOCAL testing without a proxy, comment out `expose` and uncomment
    # `ports` to publish on the host, then open http://localhost:3000.
    expose:
      - "3000"
    # ports:
    #   - "${PORT:-3000}:3000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - mc-data:/minecraft/data
    environment:
      - NODE_ENV=${NODE_ENV:-production}
      - LOG_LEVEL=${LOG_LEVEL:-info}
      # base64 of the bcrypt hash — avoids docker/Coolify eating the `$` chars.
      - ADMIN_PASSWORD_HASH_B64=${ADMIN_PASSWORD_HASH_B64}
      - SESSION_SECRET=${SESSION_SECRET}
      - MC_CONTAINER_NAME=craftdock-mc-server
      - MC_DATA_PATH=/minecraft/data
      - MC_EDITION=bedrock
      - MC_WORLD_NAME=worlds
      - RCON_HOST=craftdock-mc-server
      - RCON_PORT=25575
      - RCON_PASSWORD=${RCON_PASSWORD:-}   # Bedrock ignores RCON; leave empty
      - MAP_VERSION=${MAP_VERSION:-}
    healthcheck:
      test: ["CMD", "node", "src/healthcheck.js"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 10s
    networks: [craftdock-net]
    # `always` (not `unless-stopped`): the panel must come back after ANY exit —
    # a crash, its own healthcheck self-restart (kill PID 1), a manual stop, or a
    # host/daemon reboot. It's the control plane, so it should never stay down.
    restart: always

  minecraft-server:
    image: itzg/minecraft-bedrock-server:latest
    container_name: craftdock-mc-server
    # stdin_open + tty are REQUIRED by CraftDock: without a TTY, stdin (the Bedrock
    # command channel via `docker attach`) never reaches the server, and the log
    # stream is multiplexed (garbles the Console tab).
    stdin_open: true
    tty: true
    ports:
      - "19132:19132/udp"      # Bedrock game port (raw UDP — open it in the host firewall)
    volumes:
      - mc-data:/data
    environment:
      - EULA=TRUE
      - OVERRIDE_SERVER_PROPERTIES=false   # so the Options tab persists
    healthcheck:
      test: ["CMD-SHELL", "/usr/local/bin/mc-health || exit 1"]
      interval: 30s
      timeout: 10s
      retries: 5
      start_period: 120s
    networks: [craftdock-net]
    restart: unless-stopped

volumes:
  mc-data:
networks:
  craftdock-net:
    driver: bridge