services:
  proxy:
    build: ./proxy
    image: git.itqdev.xyz/4x10m/rusgram-proxy:${IMAGE_TAG:-latest}
    restart: unless-stopped
    ports:
      - "38000:5000"

  # Внутренние ноды НЕ публикуем на хост вообще.
  # Атака #244475: GET :38002/images/16 без auth → флаги из comments.
  # Даже 127.0.0.1:38002 опасно, если на боксе крутят туннели/агентов.
  static:
    build: ./static
    image: git.itqdev.xyz/4x10m/rusgram-static:${IMAGE_TAG:-latest}
    restart: unless-stopped
    expose:
      - "5001"
    volumes:
      - "./website:/app/files"

  database:
    build: ./database
    image: git.itqdev.xyz/4x10m/rusgram-database:${IMAGE_TAG:-latest}
    restart: unless-stopped
    environment:
      RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
    expose:
      - "5002"
    volumes:
      - "./website:/app/files"

  logic:
    build: ./logic
    image: git.itqdev.xyz/4x10m/rusgram-logic:${IMAGE_TAG:-latest}
    restart: unless-stopped
    environment:
      RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
    expose:
      - "5003"

  content:
    build: ./content
    image: git.itqdev.xyz/4x10m/rusgram-content:${IMAGE_TAG:-latest}
    restart: unless-stopped
    environment:
      RUSGRAM_INTERNAL: "e9b2f6d14a8c7035e1d0a6b8c4f2e7a9"
    expose:
      - "5004"
    volumes:
      - "./website:/app/files"