services:
  # Bitcoin Core - regtest mode (no blockchain sync)
  bitcoin:
    image: lncm/bitcoind:v27.0
    container_name: archy-bitcoin
    ports:
      - "18443:18443"  # RPC
      - "18444:18444"  # P2P
    volumes:
      - bitcoin-data:/data/.bitcoin
    command: |
      -regtest
      -server
      -rpcuser=bitcoin
      -rpcpassword=bitcoinpass
      -rpcallowip=0.0.0.0/0
      -rpcbind=0.0.0.0
      -txindex=1
      -zmqpubrawblock=tcp://0.0.0.0:28332
      -zmqpubrawtx=tcp://0.0.0.0:28333
    restart: unless-stopped
    networks:
      - archy-net

  # Bitcoin Core UI - Web interface
  bitcoin-ui:
    image: nginx:alpine
    container_name: archy-bitcoin-ui
    ports:
      - "18445:80"
    volumes:
      - ./docker/bitcoin-ui:/usr/share/nginx/html:ro
    restart: unless-stopped
    networks:
      - archy-net

  # BTCPay Server
  btcpay:
    image: btcpayserver/btcpayserver:1.13.5
    container_name: archy-btcpay
    ports:
      - "14142:49392"
    environment:
      BTCPAY_PROTOCOL: http
      BTCPAY_HOST: localhost:14142
      BTCPAY_CHAINS: btc
      BTCPAY_BTCEXPLORERURL: http://mempool:4080
      BTCPAY_BTCRPCURL: http://bitcoin:18443
      BTCPAY_BTCRPCUSER: bitcoin
      BTCPAY_BTCRPCPASSWORD: bitcoinpass
    depends_on:
      - bitcoin
      - postgres-btcpay
    restart: unless-stopped
    networks:
      - archy-net

  postgres-btcpay:
    image: postgres:15-alpine
    container_name: archy-btcpay-db
    environment:
      POSTGRES_DB: btcpay
      POSTGRES_USER: btcpay
      POSTGRES_PASSWORD: btcpaypass
    volumes:
      - postgres-btcpay-data:/var/lib/postgresql/data
    restart: unless-stopped
    networks:
      - archy-net

  # Home Assistant
  homeassistant:
    image: homeassistant/home-assistant:2024.1
    container_name: archy-homeassistant
    ports:
      - "8123:8123"
    volumes:
      - homeassistant-data:/config
    environment:
      TZ: America/New_York
    restart: unless-stopped
    networks:
      - archy-net

  # Grafana
  grafana:
    image: grafana/grafana:10.2.0
    container_name: archy-grafana
    ports:
      - "3000:3000"
    volumes:
      - grafana-data:/var/lib/grafana
    environment:
      GF_SECURITY_ADMIN_PASSWORD: admin
      GF_USERS_ALLOW_SIGN_UP: "false"
    restart: unless-stopped
    networks:
      - archy-net

  # Fedimint (using guardians setup)
  fedimint:
    image: fedimint/fedimintd:v0.3.0
    container_name: archy-fedimint
    platform: linux/amd64  # Emulate x86 on ARM Macs
    ports:
      - "8173:8173"
    volumes:
      - fedimint-data:/data
    environment:
      FM_BIND_P2P: 0.0.0.0:8173
      FM_BIND_API: 0.0.0.0:8174
    restart: unless-stopped
    networks:
      - archy-net

  # Lightning Network Daemon (LND)
  lnd:
    image: lightninglabs/lnd:v0.17.4-beta
    container_name: archy-lnd
    ports:
      - "9735:9735"  # P2P
      - "8080:8080"  # REST
      - "10009:10009" # gRPC
    volumes:
      - lnd-data:/root/.lnd
    command: |
      --bitcoin.active
      --bitcoin.regtest
      --bitcoin.node=bitcoind
      --bitcoind.rpchost=bitcoin:18443
      --bitcoind.rpcuser=bitcoin
      --bitcoind.rpcpass=bitcoinpass
      --bitcoind.zmqpubrawblock=tcp://bitcoin:28332
      --bitcoind.zmqpubrawtx=tcp://bitcoin:28333
      --debuglevel=info
      --rpclisten=0.0.0.0:10009
      --restlisten=0.0.0.0:8080
      --noseedbackup
    depends_on:
      - bitcoin
    restart: unless-stopped
    networks:
      - archy-net

  # LND UI - Web interface
  lnd-ui:
    image: nginx:alpine
    container_name: archy-lnd-ui
    ports:
      - "8085:80"
    volumes:
      - ./docker/lnd-ui:/usr/share/nginx/html:ro
    restart: unless-stopped
    networks:
      - archy-net

  # Mempool Explorer
  mempool-web:
    image: mempool/frontend:v2.5.0
    container_name: archy-mempool-web
    ports:
      - "4080:8080"
    environment:
      FRONTEND_HTTP_PORT: 8080
      BACKEND_MAINNET_HTTP_HOST: mempool-api
    depends_on:
      - mempool-api
    restart: unless-stopped
    networks:
      - archy-net

  mempool-api:
    image: mempool/backend:v2.5.0
    container_name: archy-mempool-api
    environment:
      MEMPOOL_BACKEND: electrum
      ELECTRUM_HOST: bitcoin
      ELECTRUM_PORT: 50001
      ELECTRUM_TLS_ENABLED: "false"
      CORE_RPC_HOST: bitcoin
      CORE_RPC_PORT: 18443
      CORE_RPC_USERNAME: bitcoin
      CORE_RPC_PASSWORD: bitcoinpass
      DATABASE_ENABLED: "true"
      DATABASE_HOST: mysql-mempool
      DATABASE_DATABASE: mempool
      DATABASE_USERNAME: mempool
      DATABASE_PASSWORD: mempoolpass
    depends_on:
      - bitcoin
      - mysql-mempool
    restart: unless-stopped
    networks:
      - archy-net

  mysql-mempool:
    image: mariadb:10.11
    container_name: archy-mempool-db
    environment:
      MYSQL_DATABASE: mempool
      MYSQL_USER: mempool
      MYSQL_PASSWORD: mempoolpass
      MYSQL_ROOT_PASSWORD: rootpass
    volumes:
      - mysql-mempool-data:/var/lib/mysql
    restart: unless-stopped
    networks:
      - archy-net

  # SearXNG
  searxng:
    image: searxng/searxng:latest
    container_name: archy-searxng
    ports:
      - "8082:8080"
    volumes:
      - searxng-data:/etc/searxng
    environment:
      SEARXNG_BASE_URL: http://localhost:8082/
    restart: unless-stopped
    networks:
      - archy-net

  # OnlyOffice Document Server
  onlyoffice:
    image: onlyoffice/documentserver:7.5.1
    container_name: archy-onlyoffice
    ports:
      - "8083:80"
    volumes:
      - onlyoffice-data:/var/www/onlyoffice/Data
      - onlyoffice-logs:/var/log/onlyoffice
    environment:
      JWT_ENABLED: "false"
    restart: unless-stopped
    networks:
      - archy-net

  # Penpot - Design and prototyping platform
  penpot-frontend:
    image: penpotapp/frontend:latest
    container_name: archy-penpot-frontend
    ports:
      - "9001:8080"
    volumes:
      - penpot-assets:/opt/data/assets
    depends_on:
      - penpot-backend
      - penpot-exporter
    restart: unless-stopped
    networks:
      - archy-net
    environment:
      PENPOT_FLAGS: disable-email-verification enable-login-with-password enable-registration disable-secure-session-cookies

  penpot-backend:
    image: penpotapp/backend:latest
    container_name: archy-penpot-backend
    volumes:
      - penpot-assets:/opt/data/assets
    depends_on:
      penpot-postgres:
        condition: service_healthy
      penpot-valkey:
        condition: service_healthy
    restart: unless-stopped
    networks:
      - archy-net
    environment:
      PENPOT_FLAGS: disable-email-verification enable-login-with-password enable-registration enable-smtp disable-secure-session-cookies enable-prepl-server
      PENPOT_PUBLIC_URI: http://localhost:9001
      PENPOT_SECRET_KEY: dev_secret_key_change_in_production_base64_512bits
      PENPOT_DATABASE_URI: postgresql://penpot-postgres/penpot
      PENPOT_DATABASE_USERNAME: penpot
      PENPOT_DATABASE_PASSWORD: penpot
      PENPOT_REDIS_URI: redis://penpot-valkey/0
      PENPOT_OBJECTS_STORAGE_BACKEND: fs
      PENPOT_OBJECTS_STORAGE_FS_DIRECTORY: /opt/data/assets
      PENPOT_TELEMETRY_ENABLED: false
      PENPOT_SMTP_DEFAULT_FROM: no-reply@localhost
      PENPOT_SMTP_DEFAULT_REPLY_TO: no-reply@localhost
      PENPOT_SMTP_HOST: penpot-mailcatch
      PENPOT_SMTP_PORT: 1025
      PENPOT_SMTP_TLS: false
      PENPOT_SMTP_SSL: false

  penpot-exporter:
    image: penpotapp/exporter:latest
    container_name: archy-penpot-exporter
    restart: unless-stopped
    depends_on:
      penpot-valkey:
        condition: service_healthy
    networks:
      - archy-net
    environment:
      PENPOT_SECRET_KEY: dev_secret_key_change_in_production_base64_512bits
      PENPOT_PUBLIC_URI: http://penpot-frontend:8080
      PENPOT_REDIS_URI: redis://penpot-valkey/0

  penpot-postgres:
    image: postgres:15
    container_name: archy-penpot-postgres
    stop_signal: SIGINT
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U penpot"]
      interval: 2s
      timeout: 10s
      retries: 5
      start_period: 2s
    volumes:
      - penpot-postgres-data:/var/lib/postgresql/data
    restart: unless-stopped
    networks:
      - archy-net
    environment:
      POSTGRES_INITDB_ARGS: --data-checksums
      POSTGRES_DB: penpot
      POSTGRES_USER: penpot
      POSTGRES_PASSWORD: penpot

  penpot-valkey:
    image: valkey/valkey:8.1
    container_name: archy-penpot-valkey
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "valkey-cli ping | grep PONG"]
      interval: 1s
      timeout: 3s
      retries: 5
      start_period: 3s
    networks:
      - archy-net
    environment:
      VALKEY_EXTRA_FLAGS: --maxmemory 128mb --maxmemory-policy volatile-lfu

  penpot-mailcatch:
    image: sj26/mailcatcher:latest
    container_name: archy-penpot-mailcatch
    restart: unless-stopped
    expose:
      - '1025'
    ports:
      - "1080:1080"
    networks:
      - archy-net

  # Placeholder services for apps without direct Docker images
  # These will show "coming soon" pages or simple status pages
  
  # Endurain - Self-hosted fitness tracking
  endurain-db:
    image: postgres:17-alpine
    container_name: archy-endurain-db
    environment:
      POSTGRES_DB: endurain
      POSTGRES_USER: endurain
      POSTGRES_PASSWORD: endurain_dev_password
    volumes:
      - endurain-db-data:/var/lib/postgresql/data
    restart: unless-stopped
    networks:
      - archy-net

  endurain:
    image: ghcr.io/endurain-project/endurain:latest
    container_name: archy-endurain
    ports:
      - "8084:8080"
    environment:
      DB_HOST: endurain-db
      DB_PORT: 5432
      DB_NAME: endurain
      DB_USER: endurain
      DB_PASSWORD: endurain_dev_password
      POSTGRES_DB: endurain
      POSTGRES_USER: endurain
      POSTGRES_PASSWORD: endurain_dev_password
      SECRET_KEY: dev_secret_key_change_in_production_32chars
      FERNET_KEY: 7NfMMRSCWcoNDSjqBX8WoYH9nTFk1VdQOdZY13po53Y=
      TZ: America/New_York
      ENDURAIN_HOST: http://localhost:8084
      BEHIND_PROXY: "false"
    volumes:
      - endurain-data:/app/backend/data
      - endurain-logs:/app/backend/logs
    depends_on:
      - endurain-db
    restart: unless-stopped
    networks:
      - archy-net

  # Morphos - Self-hosted file converter
  morphos:
    image: ghcr.io/danvergara/morphos-server:latest
    container_name: archy-morphos
    ports:
      - "8081:8080"
    volumes:
      - /tmp:/tmp
    healthcheck:
      test: timeout 10s bash -c ':> /dev/tcp/127.0.0.1/8080' || exit 1
      interval: 60s
      retries: 3
      start_period: 20s
      timeout: 30s
    restart: unless-stopped
    networks:
      - archy-net

  # Nextcloud - Cloud storage and file management
  nextcloud-db:
    image: mariadb:11
    container_name: archy-nextcloud-db
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    restart: unless-stopped
    volumes:
      - nextcloud-db-data:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: nextcloud_root_pass
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: nextcloud_pass
    networks:
      - archy-net

  nextcloud:
    image: nextcloud:latest
    container_name: archy-nextcloud
    ports:
      - "8086:80"
    restart: unless-stopped
    volumes:
      - nextcloud-data:/var/www/html
    environment:
      MYSQL_HOST: nextcloud-db
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: nextcloud_pass
      NEXTCLOUD_ADMIN_USER: admin
      NEXTCLOUD_ADMIN_PASSWORD: admin
      NEXTCLOUD_TRUSTED_DOMAINS: localhost
      OVERWRITEPROTOCOL: http
    depends_on:
      - nextcloud-db
    networks:
      - archy-net

volumes:
  bitcoin-data:
  postgres-btcpay-data:
  homeassistant-data:
  grafana-data:
  fedimint-data:
  lnd-data:
  mysql-mempool-data:
  searxng-data:
  onlyoffice-data:
  onlyoffice-logs:
  penpot-assets:
  penpot-postgres-data:
  endurain-db-data:
  endurain-data:
  endurain-logs:
  nextcloud-db-data:
  nextcloud-data:

networks:
  archy-net:
    driver: bridge